Detections
Analytics

WN11-00-000400 - All Wi-Fi Direct adapters must be disabled on the system.

Information

Wi-Fi Direct establishes a peer-to-peer (P2P) connection that lacks robust authentication. Due to its vulnerability to several types of attacks (including SSID spoofing and unauthorized network bridge), there is potential for sensitive information to be compromised.

Solution

Remove existing Wi-Fi Direct adapters from the system.

Open PowerShell with elevated privileges (run as administrator).

Enter the following command:

Get-NetAdapter -InterfaceDescription 'Microsoft Wi-Fi Direct*' -IncludeHidden | Disable-NetAdapter -Confirm:$false'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R9_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CAT|II, CCI|CCI-000382, Rule-ID|SV-288475r1256669_rule, STIG-ID|WN11-00-000400, Vuln-ID|V-288475

Plugin: Windows

Control ID: df63715d8c0f8c2224dd20c40e6b95a3b96e568f4e456c68ee46759c4102f5b4