CVE-2019-10617

nvd.nist.gov • August 13, 2026

This CVE record has been updated after NVD enrichment efforts were completed. Enrichment data supplied by the NVD may require amendment due to these changes.

Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the registry in QCA6174_9377.WIN.1.0 in QCA6174_9377

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New 'Plug and Pwn' Attacks Exploit Windows for SYSTEM Access Security researchers Alejandro Hernando and Borja Martínez unveiled 'Plug and Pwn' attacks at DEF CON 34, exploiting Windows Plug and Play features to gain SYSTEM privileges. These attacks can trick Windows into installing vulnerable vendor software without user interaction, including a zero-click variant that operates over RDP. The method involves emulating USB devices using tools like FaceDancer, leading to unauthorized software installations. Some attack chains can execute in as little as five minutes. Disabling co-installers may mitigate risks, but does not resolve the underlying vulnerability. Organizations are advised to implement device installation restrictions and disable unnecessary RDP PnP redirection. The attacks affect Windows 11 and could potentially impact other versions as well. 3 sources 69

Extracted Entities

CVEs (1)

CVE-2019-10617

CWE Weaknesses (1)

CWE-269 - Improper Privilege Management