CVE-2005-4697: The Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and pair-wise...

Security readout for executives and security teams

This CVE describes a local information disclosure issue in Microsoft Wireless Zero Configuration. A person who already has local access to an affected machine may be able to retrieve wireless encryption secrets, including WEP keys and WPA pre-shared-key material. The main business risk is reuse of those secrets to access protected wireless networks. Exposure is most likely on legacy Windows endpoints using Microsoft Wireless Zero Configuration for wireless profile management. Risk depends on whether untrusted local users or malware can run on those systems and whether stored wireless keys still grant network access. Prioritize if legacy Windows wireless clients still connect to sensitive networks or shared wireless keys are broadly reused. For modern fleets without WZCS exposure, this is mainly a legacy hygiene and credential-rotation concern. Mitigation focus: Check Microsoft or vendor guidance for supported fixes or replacement configuration.; Inventory legacy systems using Microsoft Wireless Zero Configuration.; Limit local interactive access on systems that store wireless secrets..

Prepared

Jun 29, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.