When diagnosing Internet connection issues (slow speed for example), an ISP technician may ask a user to connect their ISP-provided Ethernet cable directly to a device (typically a Windows PC) to run speed tests in the browser or pings, etc. (to rule out the possibility of the Router being the culprit).
What are the likely (realistic) as well as theoretical security implications in as far as getting access to the device / retrieving information from it (accessing files, etc.) under the following assumptions:
- This is done for a short period of time ~ 30 minutes
- The new network is identified as Public (in Windows UI)
- Remote assistance is enabled
- Windows built-in firewall is OFF, but third-party application-level firewall is enabled (restricts Internet access to apps).
And does this compromise saved passwords of network-mapped drives and locations (which are normally only accessible within LAN via the Router)?