CCE-85439-8| Platform: cpe:/o:apple:mac_os_11 | Date: (C)2022-12-26 (M)2023-07-04 |
The wake for network access feature enables other users to access a computers shared resources even if the computer is in sleep mode. The macOS benchmark states disabling the "wake for network access" feature could mitigate the risk of an attacker remotely waking the system to gain access to it
Fix
pmset -a womp 0
Parameter:
[yes/no]
Technical Mechanism:
pmset -a womp 0
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 5.3 | Attack Vector: NETWORK |
| Exploit Score: 3.9 | Attack Complexity: LOW |
| Impact Score: 1.4 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: NONE |
| | Availability: NONE |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:71668 |
