# InsigtVM agents detects wrong version of Firefox

**URL:** <https://discuss.rapid7.com/t/insigtvm-agents-detects-wrong-version-of-firefox/5222>\
**Category:** InsightVM\
**Created:** [June 1, 2021, 2:19pm UTC](https://discuss.rapid7.com/t/insigtvm-agents-detects-wrong-version-of-firefox/5222 "2021-06-01T14:19:23Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sbroekhoven](https://discuss.rapid7.com/letter_avatar_proxy/v4/letter/s/e495f1/32.png) [@sbroekhoven](https://discuss.rapid7.com/u/sbroekhoven)\
**Post date:** [June 1, 2021, 2:19pm UTC](https://discuss.rapid7.com/t/insigtvm-agents-detects-wrong-version-of-firefox/5222/1 "2021-06-01T14:19:23Z")

</div>

Is there a way do see more evidence about the vulnerabilities found by a Rapid7 agent?

There is a difference in the Rapid7 console, compared to what I can find op the PC.

What Rapid7 insightVM is saying:  
Vulnerable software installed: Mozilla Firefox 78.8.0 (C:\Program Files\Mozilla Firefox\firefox.exe)

My computer says:  
C:\Program Files\Mozilla Firefox\>firefox.exe -v | more  
Mozilla Firefox 88.0.1

When I remove Firefox completely, the “problem” is gone. But when I install version 88.0.1 again, it detects both versions again. I search the whole computer, without success for the old version.

In the installed software section are both versions mentioned.  
 ![image](https://forum-uploads-hub-prod-1-us-east-1-rapid7-com.s3.dualstack.us-east-1.amazonaws.com/original/1X/c14c26e844299a1b4687c6d16335a0b2aabab22e.png)

---

<div class="post-metadata">

**Author:** ![josh\_cantrell](https://discuss.rapid7.com/user_avatar/discuss.rapid7.com/josh_cantrell/32/643_2.png) [@josh\_cantrell](https://discuss.rapid7.com/u/josh_cantrell)\
**Post date:** [June 4, 2021, 7:53pm UTC](https://discuss.rapid7.com/t/insigtvm-agents-detects-wrong-version-of-firefox/5222/2 "2021-06-04T19:53:56Z")

</div>

Had a similar issue and worked through with support. Turned out to be an orphaned regkey from a roaming profile found here:

HKEY\_USERS\<sid\>\Software\Mozilla\Mozilla Firefox\<ver\> (x64 en-US)\Main HEKY\_USERS\<sid\>\Software\Mozilla\Mozilla Firefox \bin

Hope that helps,  
Josh

---

<div class="post-metadata">

**Author:** ![sbroekhoven](https://discuss.rapid7.com/letter_avatar_proxy/v4/letter/s/e495f1/32.png) [@sbroekhoven](https://discuss.rapid7.com/u/sbroekhoven)\
**Post date:** [June 7, 2021, 2:40pm UTC](https://discuss.rapid7.com/t/insigtvm-agents-detects-wrong-version-of-firefox/5222/3 "2021-06-07T14:40:03Z")

</div>

Thank you! I’ll check it. If this solves my problem. The “proof” is wrong in InsightVM.

---

<div class="post-metadata">

**Author:** ![sbroekhoven](https://discuss.rapid7.com/letter_avatar_proxy/v4/letter/s/e495f1/32.png) [@sbroekhoven](https://discuss.rapid7.com/u/sbroekhoven)\
**Post date:** [June 11, 2021, 8:45am UTC](https://discuss.rapid7.com/t/insigtvm-agents-detects-wrong-version-of-firefox/5222/4 "2021-06-11T08:45:38Z")

</div>

This was actually the solution.

---

<div class="post-metadata">

**Author:** ![christina\_schelin](https://discuss.rapid7.com/user_avatar/discuss.rapid7.com/christina_schelin/32/777_2.png) [@christina\_schelin](https://discuss.rapid7.com/u/christina_schelin)\
**Post date:** [August 6, 2021, 2:38pm UTC](https://discuss.rapid7.com/t/insigtvm-agents-detects-wrong-version-of-firefox/5222/5 "2021-08-06T14:38:04Z")

</div>

I wrote a PowerShell script to go update that registry to match the actual installed version, even.