CUI

USNS MONTFORD POINT - Findings

Back to Ship Export CSV Download POA&M

Showing 4 of 4 findings (filtered) View Documentation Status (90 tracked)

Vuln ID	Severity	Asset	STIG	Title	Status	Doc Status	Assigned To	Actions
V-223312	CAT II	MONT-WS-92040	Microsoft Office 365 ProPlus Security Te...	Dynamic Data Exchange (DDE) server launch in Excel...		Documented Pending Review
Check Text Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Don't allow Dynamic Data Exchange (DDE) server launch in Excel is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security\external content If the value for "disableddeserverlaunch" is REG_DWORD = 1, this is not a finding. Fix Text Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Don't allow Dynamic Data Exchange (DDE) server launch in Excel to "Enabled". Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: BBA5A336D17B95566A0BD1AB5AC8D265C75A0172 ~~~~~ 'Don't allow Dynamic Data Exchange (DDE) server launch in Excel' is NOT Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\external content Value Name: disableddeserverlaunch (Not found) Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_MSOffice365_V3R3_20251023-142330.ckl Scan Date: 2026-01-14T12:57:25.987513 Technology Area: Windows Operating System
V-223312	CAT II	MONT-WS-92010	Microsoft Office 365 ProPlus Security Te...	Dynamic Data Exchange (DDE) server launch in Excel...		Documented Pending Review
Check Text Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Don't allow Dynamic Data Exchange (DDE) server launch in Excel is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security\external content If the value for "disableddeserverlaunch" is REG_DWORD = 1, this is not a finding. Fix Text Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Don't allow Dynamic Data Exchange (DDE) server launch in Excel to "Enabled". Finding Details Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: BBA5A336D17B95566A0BD1AB5AC8D265C75A0172 ~~~~~ 'Don't allow Dynamic Data Exchange (DDE) server launch in Excel' is NOT Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\external content Value Name: disableddeserverlaunch (Not found) Source: _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_MSOffice365_V3R3_20251023-141031.ckl Scan Date: 2026-01-14T12:57:28.231385 Technology Area: Windows Operating System
V-223312	CAT II	MONT-SW-89108	Microsoft Office 365 ProPlus Security Te...	Dynamic Data Exchange (DDE) server launch in Excel...		Documented Pending Review
Check Text Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Don't allow Dynamic Data Exchange (DDE) server launch in Excel is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security\external content If the value for "disableddeserverlaunch" is REG_DWORD = 1, this is not a finding. Fix Text Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Don't allow Dynamic Data Exchange (DDE) server launch in Excel to "Enabled". Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 7E5731CF8FADBD0CC47863F2C22FB5DF1D2C87AA ~~~~~ 'Don't allow Dynamic Data Exchange (DDE) server launch in Excel' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\external content Value Name: disableddeserverlaunch Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_MSOffice365_V3R4_20251217-202911.ckl Scan Date: 2026-03-04T15:25:16.145630 Technology Area: Windows Operating System
V-223312	CAT II	MONT-SW-89134	Microsoft Office 365 ProPlus Security Te...	Dynamic Data Exchange (DDE) server launch in Excel...		Documented Pending Review
Check Text Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Don't allow Dynamic Data Exchange (DDE) server launch in Excel is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\excel\security\external content If the value for "disableddeserverlaunch" is REG_DWORD = 1, this is not a finding. Fix Text Set policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Don't allow Dynamic Data Exchange (DDE) server launch in Excel to "Enabled". Finding Details Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 7E5731CF8FADBD0CC47863F2C22FB5DF1D2C87AA ~~~~~ 'Don't allow Dynamic Data Exchange (DDE) server launch in Excel' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\external content Value Name: disableddeserverlaunch Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_MSOffice365_V3R4_20251217-201101.ckl Scan Date: 2026-03-04T15:25:42.171357 Technology Area: Windows Operating System

CUI