Summary

An attacker with access to a Windows system can exploit a flaw in the UPnP Device Host to gain elevated privileges on the local machine. This could allow them to install malicious software or access sensitive data. To mitigate this risk, ensure that the UPnP Device Host is disabled on all systems unless it is absolutely necessary for a specific function.