CCE-43272-4| Platform: cpe:/o:microsoft:windows_10 | Date: (C)2016-09-23 (M)2023-07-04 |
Disable: 'Allow definition updates from Microsoft Update'
This policy setting allows you to enable download of definition updates from Microsoft Update even if the Automatic Updates default server is configured to another download source such as Windows Update.
If you enable this setting, definition updates will be downloaded from Microsoft Update.
If you disable or do not configure this setting, definition updates will be downloaded from the configured download source.
Counter Measure:
Configure this setting depending on your organization's requirements.
Potential Impact:
Definition updates will be downloaded from Microsoft Update.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows DefenderSignature UpdatesAllow definition updates from Microsoft Update
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindows DefenderSignature UpdatesForceUpdateFromMU
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 3.1 | Attack Vector: NETWORK |
| Exploit Score: 1.6 | Attack Complexity: HIGH |
| Impact Score: 1.4 | Privileges Required: LOW |
| Severity: LOW | User Interaction: NONE |
| Vector: AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: NONE |
| | Availability: NONE |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:35257 |
