Problem after windows update, KAS blocked a hyperv server replications.

[FAC]

After applying Microsoft updates, Kaspersy blocked me from replicating virtual machines between two hosts.

Hyperv1 -> Windows Server 2012 R2
hyperv2 -> windows server 2016

In the Kaspersky MMC console these messages appear in Hperv3 and the replica of the virtual machines does not work.

Event name Only object detected (Vulnerable process running)
Severity: Information
Application: Kaspersky Security for Windows Server
Version number: 11.0.1.897
Task Name: Network Threat Protection
Device: HYPERV2
Group: WINDOWS_Servers
Time: Thursday, April 14, 2022 12:00:44
Name of the virtual administration server:
Description: Object detected: Intrusion.Win.CVE-2010-0361.exploit
Object name: 192.168.1.210:50300
Protocol: TCP
Sender: 192.168.1.210:50300
Receiver: 192.168.1.200:80

Host event name listed as untrusted
Severity: Warning
Application: Kaspersky Security for Windows Server
Version number: 11.0.1.897
Name of the homework:
Device: HYPERV3
Group: WINDOWS_Servers
Time: Thursday, April 14, 2022 12:00:43
Name of the virtual administration server:
Description: Host listed as untrusted as of 04/14/22 12:30:42, source: . Computer: 192.168.1.210:50300.

 

In the WEB console, I try to see more information in the EDR - Enriched part, but I can't because I get this error:

The required plug-in has not been installed. Install the EDR Lite plugin to open an incident.

I would like to know if it really is a security problem or a false positive and how to solve it. Thank you

 

Edited April 14, 2022 by FAC

[DonKid]

Please, open a ticket here.

[FAC]

Hello,

Yesterday 04/14/2022 at 12:30h we already opened the ticket, with the number INC000014011891,

Thanks