A municipal wireless report marks a WPS finding critical because successful WPS abuse reveals the network PSK. What severity framing is that using?
Select an answer to reveal the explanation.
Short Explanation
WPS that coughs up the PSK is not a paper cut—it is the front-door key. Treat it like full SSID compromise because that is what a shared passphrase buys. Severity follows the keys, not the RSSI meter.
Full Explanation
When a WPS weakness allows recovery of the WPA/WPA2 passphrase, an attacker can join the SSID as a legitimate PSK user. That impact aligns with full wireless confidentiality and access compromise for that network name. Severity should reflect credential exposure, not merely RF signal strength. Informational ratings are inappropriate when passphrase recovery is demonstrated or clearly attainable within scope.