As cited
Copy frozen at (site build).
vulnerabilities
Plug and Pwn attack uses fake USB devices for Windows SYSTEM access
Researchers disclosed Plug and Pwn attacks that exploit Windows Plug and Play to force installation of vulnerable vendor software through fake USB devices. The method achieves SYSTEM level privileges on targeted machines. This attack vector leverages the operating system's automatic driver installation mechanism without requiring user interaction beyond physical device connection.
Why it matters: Windows administrators and enterprise security teams need to assess physical access controls and Plug and Play policies, as attackers with brief device proximity can escalate to SYSTEM privileges on unprotected machines.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Plug and Pwn attack uses fake USB devices for Windows SYSTEM access
Researchers disclosed Plug and Pwn attacks that exploit Windows Plug and Play to force installation of vulnerable vendor software through fake USB devices. The method achieves SYSTEM level privileges on targeted machines. This attack vector leverages the operating system's automatic driver installation mechanism without requiring user interaction beyond physical device connection.
Why it matters: Windows administrators and enterprise security teams need to assess physical access controls and Plug and Play policies, as attackers with brief device proximity can escalate to SYSTEM privileges on unprotected machines.
- Source published
- First seen by Cybersecurity Tracker