> For the complete documentation index, see [llms.txt](https://pnpt.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/insufficient-patching.md).

# Insufficient Patching

## Overview

The issue with most organizations isn't **Insufficient Patching** but rather **Weak/Breached Password.** However this doesn't mean that there aren't patching issues out there. It can range from out of date software to something more significant like **RCE** on an application or system.

{% hint style="info" %}
Check the versions of applications and software you come across in the engagement to make sure they're all up to date
{% endhint %}

## Example 1

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2FPmGaV8QpEhEMMOJfZmMY%2Fimage.png?alt=media&amp;token=19dfa26d-69ee-4715-964f-640d1729b7bd" alt=""><figcaption><p>Vulnerable server hosting Netscale</p></figcaption></figure>

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2F9oGG3570s3tTyTMv3LNY%2Fimage.png?alt=media&amp;token=062416b6-0d6d-476b-a00d-1b4418262f77" alt=""><figcaption><p>Scanner flagging as vulnerable</p></figcaption></figure>

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2Foi97QpwyzGk3iK3OR1pU%2Fimage.png?alt=media&amp;token=a00709b2-0b9c-4e32-ae3c-5d80e4a106b7" alt=""><figcaption><p>More evidence and Remediation</p></figcaption></figure>

## Example 2

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2FjB7eqdBr5ggQI2Piuv4s%2Fimage.png?alt=media&amp;token=ac525fb5-cf0b-415d-8f5c-1c01d18506cf" alt=""><figcaption><p>Simple PHP server that is out of date. In risk section CYA language is used</p></figcaption></figure>

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2FwFoEhVjH7jh1HoWunUQb%2Fimage.png?alt=media&amp;token=3f56989e-e786-4c21-997d-c8c4f5a4c735" alt=""><figcaption><p>Evidence and Remediation</p></figcaption></figure>