Vulnerability Discussion

Wi-Fi Direct establishes a peer-to-peer (P2P) connection that lacks robust authentication. Due to its vulnerability to several types of attacks (including SSID spoofing and unauthorized network bridge), there is potential for sensitive information to be compromised.

Check

Determine whether any Wi-Fi Direct adapters exist on the system.

Open PowerShell with elevated privileges (run as administrator).

Enter the following command:

Get-NetAdapter -InterfaceDescription "Microsoft Wi-Fi Direct*" -IncludeHidden

If there are no Wi-Fi Direct adapters configured on the system, no adapter information will display.

If any Wi-Fi Direct adapters are listed, this is a finding.

Fix

Remove existing Wi-Fi Direct adapters from the system.

Open PowerShell with elevated privileges (run as administrator).

Enter the following command:

Get-NetAdapter -InterfaceDescription "Microsoft Wi-Fi Direct*" -IncludeHidden | Disable-NetAdapter -Confirm:$false".