Microsoft CVE-2022-38023: Netlogon RPC Elevation of Privilege Vulnerability

InsightVM
1

My understanding of this vulnerability is if the

Registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
has value RequireSeal with either data 1 or 2 then asset is not vulnerable.

But I am finding assets being flagged as vulnerable even when the data for RequireSeal is 1

So what exactly is being checked for this cve ?

2

Actually the device has RequireSignOrSeal and not RequireSeal.