CVE-2005-4696: The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of...

Security readout for executives and security teams

This CVE describes wireless credentials being left readable in process memory by Microsoft Wireless Zero Configuration. An attacker who can access that memory could recover WEP or WPA pre-shared key material and use it to join the wireless network. The provided sources do not establish active exploitation, a current patch, or a complete affected-product list. Likely limited to legacy environments using Microsoft WZCS with WEP or WPA pre-shared keys. The bundle lists affected product data as n/a, so exposure should be confirmed by inventory rather than assumed. Treat this as a legacy exposure issue. It is not KEV-listed, but credential theft could give an attacker network access. Prioritize environments that still run older Windows wireless clients or shared-key Wi-Fi. Mitigation focus: Inventory legacy systems using Microsoft Wireless Zero Configuration.; Check Microsoft or vendor guidance for supported remediation.; Retire unsupported wireless clients where feasible..

Prepared

Jun 29, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.