CCE-4992-4| Platform: cpe:/o:microsoft:windows_vista | Date: (C)2012-03-13 (M)2023-07-04 |
Turn on Mapper I/O (LLTDIO) driver
This policy setting changes the operational behavior of the Mapper I/O network protocol driver.
LLTDIO allows a computer to discover the topology of a network it's connected to. It also allows a computer to initiate Quality-of-Service requests such as bandwidth estimation and network health analysis.
If you enable this policy setting, additional options are available to fine-tune your selection. You may choose the 'Allow operation while in domain' option to allow LLTDIO to operate on a network interface that's connected to a managed network. On the other hand, if a network interface is connected to an unmanaged network, you may choose the 'Allow operation while in public network' and 'Prohibit operation while in private network' options instead.
If you disable or do not configure this policy setting, the default behavior of LLTDIO will apply.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesNetworkLink-Layer Topology Discovery!Turn on Mapper I/O (LLTDIO) driver
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsLLTD!EnableLLTDIO
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 3.7 | Attack Vector: NETWORK |
| Exploit Score: 2.2 | Attack Complexity: HIGH |
| Impact Score: 1.4 | Privileges Required: NONE |
| Severity: LOW | User Interaction: NONE |
| Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: NONE |
| | Availability: NONE |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:gov.nist.usgcb.vista:def:6660 |
| BITS Shared Assessments SIG v6.0 | BITS Shared Assessments SIG v6.0 |
| Jericho Forum | Jericho Forum |
| HIPAA/HITECH Act | HIPAA/HITECH Act |
| FedRAMP Security Controls(Final Release Jan 2012)--LOW IMPACT LEVEL-- | FedRAMP Security Controls(Final Release Jan 2012)--LOW IMPACT LEVEL-- |
| ISO/IEC 27001-2005 | ISO/IEC 27001-2005 |
| COBIT 4.1 | COBIT 4.1 |
| GAPP (Aug 2009) | GAPP (Aug 2009) |
| NERC CIP | NERC CIP |
| NIST SP800-53 R3 | NIST SP800-53 R3 CM-6 |
| PCIDSS v2.0 | PCIDSS v2.0 |
| FedRAMP Security Controls(Final Release Jan 2012)--MODERATE IMPACT LEVEL-- | FedRAMP Security Controls(Final Release Jan 2012)--MODERATE IMPACT LEVEL-- |
| BITS Shared Assessments AUP v5.0 | BITS Shared Assessments AUP v5.0 |
