Researchers Turn USB AutoInstall Into a Full SYSTEM Takeover on Windows 11

Image for article Researchers Turn USB AutoInstall Into a Full SYSTEM Takeover on Windows 11
News Source : Internet

News Summary

  • Windows Plug and Play can be abused to fetch signed vendor software for an emulated USB device.
  • Researchers chained to SYSTEM access on a fully updated Windows 11 machine.
  • The same PnP path can be triggered over Remote Desktop without physical hardware when supported plug and play or low-level USB redirection is enabled.
  • Microsoft says Remote Desktop Services does not allow supported Plug and play and RemoteFX USB red redirects by default, and its USB-redirection guidance requires plug and Play redirection to be enabled.

Must read Articles