CVE-2021-40444: Deactivate Workaround: Disable ActiveX Download - superseded
Log In or Register to download the BES file, and more.

0 Votes

Versioning - This is an older version.

1CVE-2021-40444: Deactivate Workaround: Disable ActiveX Download9/10/2021 12:07:11 AM
2CVE-2021-40444: Deactivate Workaround: Disable ActiveX Download9/10/2021 8:39:39 AM
3CVE-2021-40444: Deactivate Workaround: Disable ActiveX Download9/10/2021 8:44:23 AM
4CVE-2021-40444: Deactivate Workaround: Disable ActiveX Download9/11/2021 8:17:39 AM

Description

Deactivate the Workaround for CVE-2021-40444

Property Details

ID26872
StatusBeta - Preliminary testing ready for more
TitleCVE-2021-40444: Deactivate Workaround: Disable ActiveX Download
DomainBESC
CategoryWorkaround
SourceTrevor Norrey
Source Release Date9/8/2021 12:00:00 AM
CVENamesCVE-2021-40444
KeywordsCVE-2021-40444
Added by on 9/10/2021 12:07:11 AM
Last Modified by on 9/10/2021 12:07:11 AM
Counters 57 Views / 2 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Relevance

isWindows (Relevance 1172)
Used in 1142 fixlets and 537 analyses   * Results in a true/false
Show indented relevance
windows of operating system
Used in 7 fixlets and 1 analsis   * Results in a true/false
Show indented relevance
Product type of operating system = NT Workstation product type
Used in 1 fixlet   * Results in a true/false
Show indented relevance
(exists key "0" whose (exists value "1001" of it or exists value "1004" of it) of it or exists key "1" whose (exists value "1001" of it or exists value "1004" of it) of it or exists key "2" whose (exists value "1001" of it or exists value "1004" of it) of it or exists key "3" whose (exists value "1001" of it or exists value "1004" of it) of it) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones" of native registry

Actions

Action 1 (default)

Action Link Click here to deploy this action.
Script Type BigFix Action Script
action uses wow64 redirection {not x64 of operating system}

if x64 of operating system

regdelete64 "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0]" "1001"
regdelete64 "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0]" "1004"
regdelete64 "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1]" "1001"
regdelete64 "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1]" "1004"
regdelete64 "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2]" "1001"
regdelete64 "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2]" "1004"
regdelete64 "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]" "1001"
regdelete64 "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]" "1004"

else

regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0]" "1001"
regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0]" "1004"
regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1]" "1001"
regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1]" "1004"
regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2]" "1001"
regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2]" "1004"
regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]" "1001"
regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]" "1004"

endif
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.


Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!