Details

Changing the system’s file and directory permissions allows the possibility of unauthorized and anonymous modification to the operating system and installed applications.

Solution

Maintain the default file system permissions and configure the Security Option: ‘Network access: Let everyone permissions apply to anonymous users’ to ‘Disabled’ (WN10-SO-000160).

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_10_V2R3_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.

References

• 800-53|AC-3(4)
• CAT|II
• CCI|CCI-002165
• Rule-ID|SV-220717r569187_rule
• STIG-ID|WN10-00-000095
• STIG-Legacy|SV-77863
• STIG-Legacy|V-63373
• Vuln-ID|V-220717

Source

• Tenable.com/audits