A wash-class scan shows WPS version and manufacturer metadata on a city AP. What is the correct interpretation before claiming a finding?
Select an answer to reveal the explanation.
Short Explanation
Seeing the nameplate is not the same as picking the lock. WPS version and vendor info help you triage—then you still have to prove the weak class. Do not write "owned" on fingerprint alone.
Full Explanation
Discovery metadata such as WPS version and manufacturer assists asset inventory and prioritization of likely weak implementations. It is not proof that a specific exploit class succeeded or that the passphrase is recovered. Assessors should validate relevant vulnerability behavior within RoE before stating exploitability. Fingerprints remain useful context in professional reports when framed accurately.