CCE-91207-1Platform: cpe:/o:microsoft:windows_10 | Date: (C)2018-03-24 (M)2023-07-04 |
"Turn On Fast Startup"
When you shutdown a PC with Fast Startup turned on, Windows saves the current system state and the contents of memory to a file called hiberfil.sys and then it shuts down the computer. Later, when you turn on the computer, rather than performing a full load of the entire system, Windows reads only the contents of the hiberfil.sys and then restores the system state and memory to the exact same condition they were in. This restoration operation can occur much faster than a computer can boot up from a complete shut down.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO:
(2) REG: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSession ManagerPowerHiberbootEnabled
CCSS Severity: | CCSS Metrics: |
CCSS Score : 6.4 | Attack Vector: NETWORK |
Exploit Score: 1.6 | Attack Complexity: HIGH |
Impact Score: 4.7 | Privileges Required: LOW |
Severity: MEDIUM | User Interaction: NONE |
Vector: AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H | Scope: UNCHANGED |
| Confidentiality: LOW |
| Integrity: LOW |
| Availability: HIGH |
| |
References: