[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249966

 
 

909

 
 

195636

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-93227-7

Platform: cpe:/o:microsoft:windows_server_2019Date: (C)2020-09-22   (M)2023-07-04



IKE and AuthIP IPsec Keying Modules The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running.


Parameter:

[manual/disable/automatic]


Technical Mechanism:

(1) GPO: Computer ConfigurationWindows SettingsSecurity SettingsSystem Services!IKE and AuthIP IPsec Keying Modules (2) REG: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesIKEEXT!Start

CCSS Severity:CCSS Metrics:
CCSS Score : 7.0Attack Vector: NETWORK
Exploit Score: 2.2Attack Complexity: HIGH
Impact Score: 4.7Privileges Required: NONE
Severity: HIGHUser Interaction: NONE
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:HScope: UNCHANGED
 Confidentiality: LOW
 Integrity: LOW
 Availability: HIGH
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:56246


OVAL    1
oval:org.secpod.oval:def:56246
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_2019

© SecPod Technologies