CVE Catalog

CVE-1999-0593

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.25%

81th percentile - higher than 81% of all known CVEs

Summary

The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.

Risk Assessment

Allowing shutdown without authorization poses a risk of unauthorized access to data and potential service interruptions.

Recommendation

It is recommended to change the default setting of the ShutdownWithoutLogon key to restrict the ability to shut down the system by unauthorized users.

Original NVD description (English source)

The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS