A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.
Weakness
The product protects a primary channel, but it does not use the same level of protection for an alternate channel.