CCE-25920-0| Platform: cpe:/o:microsoft:windows_server_2012:- | Date: (C)2022-08-12 (M)2023-07-04 |
Specifies whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs).
If you enable this setting, the Choose a list of Internet Service Providers path in the Internet Connection Wizard will cause the wizard to exit. This prevents users from retrieving the list of ISPs, which resides on Microsoft servers.
If you disable or do not configure this setting, users will be able to connect to Microsoft to download a list of ISPs for their area.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings!Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 4.8 | Attack Vector: NETWORK |
| Exploit Score: 2.2 | Attack Complexity: HIGH |
| Impact Score: 2.5 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L | Scope: UNCHANGED |
| | Confidentiality: NONE |
| | Integrity: LOW |
| | Availability: LOW |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:82813 |
