CCE-36371-3Platform: cpe:/o:microsoft:windows_server_2012::r2 | Date: (C)2015-10-08 (M)2023-07-04 |
Configure list of Enhanced Storage devices usable on your computer
This policy setting allows you to configure a list of Enhanced Storage devices by manufacturer and product ID that are usable on your computer.
This policy setting only applies to Enhanced Storage devices that support a Certificate Authentication Silo.
If you enable this policy setting, only Enhanced Storage devices that contain a manufacturer and product ID specified in this policy are usable on your computer.
If you disable or do not configure this policy setting, all Enhanced Storage devices are usable on your computer.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesSystemEnhanced Storage Access!Configure list of Enhanced Storage devices usable on your computer
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsEnhancedStorageDevicesApprovedEnStorDevices!PolicyEnabled
CCSS Severity: | CCSS Metrics: |
CCSS Score : 6.6 | Attack Vector: PHYSICAL |
Exploit Score: 0.7 | Attack Complexity: LOW |
Impact Score: 5.9 | Privileges Required: LOW |
Severity: MEDIUM | User Interaction: NONE |
Vector: AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| Confidentiality: HIGH |
| Integrity: HIGH |
| Availability: HIGH |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:27451 |