Researchers Turn USB AutoInstall Into a Full SYSTEM Takeover on Windows 11
News Source : Internet
News Summary
- Windows Plug and Play can be abused to fetch signed vendor software for an emulated USB device.
- Researchers chained to SYSTEM access on a fully updated Windows 11 machine.
- The same PnP path can be triggered over Remote Desktop without physical hardware when supported plug and play or low-level USB redirection is enabled.
- Microsoft says Remote Desktop Services does not allow supported Plug and play and RemoteFX USB red redirects by default, and its USB-redirection guidance requires plug and Play redirection to be enabled.
Never miss a story from us, subscribe to our newsletter