CCE-37307-6| Platform: cpe:/o:microsoft:windows_server_2012::r2 | Date: (C)2015-10-08 (M)2023-07-04 |
Recovery console: Allow floppy copy and access to all drives and all folders
This policy setting makes the Recovery Console SET command available, which allows you to set the following recovery console environment variables:
- AllowWildCards. Enables wildcard support for some commands (such as the DEL command).
- AllowAllPaths. Allows access to all files and folders on the computer.
- AllowRemovableMedia. Allows files to be copied to removable media, such as a floppy disk.
- NoCopyPrompt. Does not prompt when overwriting an existing file.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationWindows SettingsSecurity SettingsLocal PoliciesSecurity Options!Recovery console: Allow floppy copy and access to all drives and all folders
(2) REG: HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionSetupRecoveryConsole!setcommand
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 6.8 | Attack Vector: PHYSICAL |
| Exploit Score: 0.9 | Attack Complexity: LOW |
| Impact Score: 5.9 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: HIGH |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:23029 |
