Craig received a report of all the computers on the network that showed all the missing patches and weak passwords. What type of software generated this report?

A port scanner identifies which TCP/UDP ports are open and which services are listening on hosts, but does not assess patch levels, software versions, or password policies.

Vulnerability scanners such as Nessus or OpenVAS enumerate hosts, check installed software versions against known CVE databases, and audit configuration weaknesses including password strength and missing patches. Generating a report listing all computers with missing patches and weak passwords is the core output of a vulnerability scanner, not any other tool category.

A virus scanner detects known malware signatures and heuristic threats in files and memory, but does not audit system patch status or evaluate password strength.

A malware scanner focuses on identifying malicious software already present on a system and does not report on configuration weaknesses such as missing patches or weak credentials.