Firefox misidentified by ThreatDown WinServer Agent

[eemizerp]

Hello everyone

My Nebula console is reporting four Firefox (high) vulnerybilities CVE-2024-9680/9936/10458/10459, on Windows Server 2022. "Remediation: Update Mozilla Firefox to at least 132.0". Actual Firefox version is 133.0, but the version reported by Vulnerabilities page is 130.0. Reruning "Scan Inventory & Vulnerability" does not change this. Noteworthy, agents on Windows 10/11 endpoints do not report this vulnerability having the same Firefox version

If I choose Action -> Update Software, agent installs v132.0.1, which is, of course, immediately overrun by Firefox internal update which re-updates to the newest version. This was also happening while 132.0.2 was current (I kind of hoped v133.0 will be properly identified, but it is not)

Machine in question is Dell PowerEdge server with fully updated Windows Server 2022 OS and up-to-date ThreatDown Endpoint (for Win Server).
This is not a big deal, I know Firefox is mis-identified and therefore these High Vulnerabilities are reported, but it kind of bugs me. I'm trying to, at least get rid of all Critical/High notifications for vulnerabilities/patches.

Is there a way to get rid of this?
Enyone else seeing this as well?


Regards

[Porthos]

2 minutes ago, eemizerp said:

Is there a way to get rid of this?

I would highly suggest that you contact Business Support to work with them directly.

Nebula
https://support.threatdown.com/hc/en-us/p/nebula_support