[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249461

 
 

909

 
 

195508

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-100051-2

Platform: cpe:/o:microsoft:windows_10Date: (C)2023-12-12   (M)2023-12-12



This policy setting controls whether users who aren't Administrators can install print drivers on the system. The recommended state for this setting is: Enabled. Note: On August 10, 2021, Microsoft announced a Point and Print Default Behavior Change which modifies the default Point and Print driver installation and update behavior to require Administrator privileges. This is documented in KB5005652 Manage new Point and Print default driver installation behavior (CVE-2021-34481) Fix: (1) GPO: Computer Configuration\Policies\Administrative Templates\MS Security Guide\Limits print driver installation to Administrators (2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint!RestrictDriverInstallationToAdministrators


Parameter:

[Enabled/Disabled]


Technical Mechanism:

(1) GPO: Computer Configuration\\Policies\\Administrative Templates\\MS Security Guide\\Limits print driver installation to Administrators (2) REG: HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\Printers\\PointAndPrint!RestrictDriverInstallationToAdministrators

CCSS Severity:CCSS Metrics:
CCSS Score : 6.7Attack Vector: LOCAL
Exploit Score: 0.8Attack Complexity: HIGH
Impact Score: 5.9Privileges Required: LOW
Severity: MEDIUMUser Interaction: REQUIRED
Vector: AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HScope: UNCHANGED
 Confidentiality: HIGH
 Integrity: HIGH
 Availability: HIGH
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:95714


OVAL    1
oval:org.secpod.oval:def:95714
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_10

© SecPod Technologies