CCE-47745-5Platform: cpe:/o:microsoft:windows_server_2016 | Date: (C)2022-09-02 (M)2023-07-04 |
This policy setting specifies whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs).If you enable this policy setting, the "Choose a list of Internet Service Providers" path in the Internet Connection Wizard causes the wizard to exit. This prevents users from retrieving the list of ISPs, which resides on Microsoft servers.If you disable or do not configure this policy setting, users can connect to Microsoft to download a list of ISPs for their area.Fix:(1) GPO: Computer ConfigurationAdministrative TemplatesSystemInternet Communication ManagementInternet Communication settingsTurn off Internet Connection Wizard if URL connection is referring to Microsoft.com(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsInternet Connection Wizard!ExitOnMSICW
Parameter:
[enabled/disabled]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings\Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW
CCSS Severity: | CCSS Metrics: |
CCSS Score : 4.8 | Attack Vector: NETWORK |
Exploit Score: 2.2 | Attack Complexity: HIGH |
Impact Score: 2.5 | Privileges Required: NONE |
Severity: MEDIUM | User Interaction: NONE |
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L | Scope: UNCHANGED |
| Confidentiality: NONE |
| Integrity: LOW |
| Availability: LOW |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:83679 |