CVE-2013-3900-Remediation-Script

# CVE-2013-3900 Remediation Script

# Define registry paths for both 32-bit and 64-bit configurations
$regPaths = @(
    "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config",
    "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config"
)

# Function to add or update the registry key
function Set-EnableCertPaddingCheck {
    param (
        [string]$path
    )
    if (!(Test-Path $path)) {
        New-Item -Path $path -Force | Out-Null
    }
    Set-ItemProperty -Path $path -Name "EnableCertPaddingCheck" -Value 1 -Type DWord
}

# Apply the fix to both registry paths
foreach ($path in $regPaths) {
    Set-EnableCertPaddingCheck -path $path
}

# Confirm changes
Write-Host "Registry keys updated successfully!" -ForegroundColor Green

# Verify the changes
foreach ($path in $regPaths) {
    $value = Get-ItemProperty -Path $path | Select-Object -ExpandProperty EnableCertPaddingCheck -ErrorAction SilentlyContinue
    if ($value -eq 1) {
        Write-Host "Verification successful for $path: EnableCertPaddingCheck = 1" -ForegroundColor Green
    } else {
        Write-Host "Verification failed for $path!" -ForegroundColor Red
    }
}

# Restart the system to apply changes
Write-Host "Restarting system in 10 seconds to apply changes..." -ForegroundColor Yellow
Start-Sleep -Seconds 10
Restart-Computer -Force