CCE-33712-1Platform: cpe:/o:microsoft:windows_8.1 | Date: (C)2015-10-14 (M)2023-07-04 |
Prevent installation of devices not described by other policy settings
This policy setting allows you to prevent the installation of devices that are not specifically described by any other policy setting.
If you enable this policy setting, Windows is prevented from installing, or updating the device driver for, any device that is not described by either the 'Allow installation of devices that match any of these device IDs' or the 'Allow installation of devices for these device classes' policy settings.
If you disable or do not configure this policy setting, Windows is allowed to install, or update the device driver for, any device that is not described by the 'Prevent installation of devices that match any of these device IDs,' 'Prevent installation of devices for these device classes,' or 'Prevent installation of removable devices' policy settings.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesSystemDevice InstallationDevice Installation Restrictions!Prevent installation of devices not described by other policy settings
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsDeviceInstallRestrictions!DenyUnspecified
CCSS Severity: | CCSS Metrics: |
CCSS Score : 7.5 | Attack Vector: NETWORK |
Exploit Score: 1.6 | Attack Complexity: HIGH |
Impact Score: 5.9 | Privileges Required: LOW |
Severity: HIGH | User Interaction: NONE |
Vector: AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| Confidentiality: HIGH |
| Integrity: HIGH |
| Availability: HIGH |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:29005 |