ID: INFO-18

Title: WPS enabled by default

Severity: Informational

CVSS Score: -

CVSS Vector String: -

Description: Wi-Fi Protected Setup (WPS) is enabled by default on both the 2.4GHz and 5GHz wireless networks. WPS PIN authentication has well-documented vulnerabilities, most notably the Pixie Dust attack and WPS PIN attack, which allow an attacker within wireless range to recover the WPS PIN. WPS-specific attacks were conducted against the device as detailed in the Wi-Fi Testing chapter, however no successful exploitation was achieved. This finding is therefore rated Informational, reflecting that WPS being enabled by default represents unnecessary attack surface and a deviation from security best practices, rather than a demonstrated exploitable vulnerability on this specific device.

Remediation: Disable WPS by default. If WPS is offered, prefer WPS Push Button (PBC) over PIN authentication and clearly communicate the associated risks to the user.

More information: See Web Interface Analysis and Wi-Fi Testing chapters.