Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-36664 | WN08-00-000012 | SV-48281r3_rule | High |
Description |
---|
Malicious users with removable boot media can gain access to a system configured to use removable media as the boot loader. |
STIG | Date |
---|---|
Windows 8 / 8.1 Security Technical Implementation Guide | 2016-06-08 |
Check Text ( C-69237r1_chk ) |
---|
Verify whether the system BIOS or controller allows removable media for the boot loader. If it does, this is a finding. If access is restricted by way of hypervisor configuration settings on virtual systems, this would not be a finding. |
Fix Text (F-41416r1_fix) |
---|
Configure the system to use a boot loader installed on fixed media. |