CCE-37163-3| Platform: cpe:/o:microsoft:windows_server_2012::r2 | Date: (C)2015-10-08 (M)2023-07-04 |
Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com
Specifies whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs).
If you enable this setting, the 'Choose a list of Internet Service Providers' path in the Internet Connection Wizard will cause the wizard to exit. This prevents users from retrieving the list of ISPs, which resides on Microsoft servers.
If you disable or do not configure this setting, users will be able to connect to Microsoft to download a list of ISPs for their area.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesSystemInternet Communication ManagementInternet Communication settings!Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsInternet Connection Wizard!ExitOnMSICW
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 4.8 | Attack Vector: NETWORK |
| Exploit Score: 2.2 | Attack Complexity: HIGH |
| Impact Score: 2.5 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L | Scope: UNCHANGED |
| | Confidentiality: NONE |
| | Integrity: LOW |
| | Availability: LOW |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:27842 |
