WSUS Dangerous Misconfigurations

Windows Server Update Services (WSUS) is the Microsoft product that deploys Windows updates to workstations and servers. Misconfigurations of WSUS settings can lead to an elevation to administrator privileges from a standard account.

Certain Microsoft WSUS parameters can have a significant security impact on the entire Active Directory and therefore require careful configuration.

Name: WSUS Dangerous Misconfigurations

Codename: C-WSUS-HARDENING

Severity: Critical