← Back to Microsoft Windows 11 Security Technical Implementation Guide

V-288475

CAT II (Medium)

All Wi-Fi Direct adapters must be disabled on the system.

Rule ID

SV-288475r1256669_rule

STIG

Microsoft Windows 11 Security Technical Implementation Guide

Version

V2R9

CCIs

CCI-000382

Discussion

Wi-Fi Direct establishes a peer-to-peer (P2P) connection that lacks robust authentication. Due to its vulnerability to several types of attacks (including SSID spoofing and unauthorized network bridge), there is potential for sensitive information to be compromised.

Check Content

Determine whether any Wi-Fi Direct adapters exist on the system.
 
Open PowerShell with elevated privileges (run as administrator).
 
Enter the following command:

Get-NetAdapter -InterfaceDescription "Microsoft Wi-Fi Direct*" -IncludeHidden
 
If there are no Wi-Fi Direct adapters configured on the system, no adapter information will display. 
 
If any Wi-Fi Direct adapters are listed, this is a finding.

Fix Text

Remove existing Wi-Fi Direct adapters from the system.
 
Open PowerShell with elevated privileges (run as administrator).
 
Enter the following command:

Get-NetAdapter -InterfaceDescription "Microsoft Wi-Fi Direct*" -IncludeHidden | Disable-NetAdapter -Confirm:$false".