ID: MEDIUM-08

Title: WPS PIN and WPA PSK identical by default

Severity: Medium

CVSS Score: 6.5

CVSS Vector String: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description: The default WPS PIN and WPA/WPA2 Pre-Shared Key are set to identical values. This creates a compounding vulnerability: an attacker who obtains the WPS PIN through any means — including decrypting the configuration backup as described in HIGH-03, or through WPS-specific attacks — can use it to authenticate via WPA/WPA2 even if WPS has been subsequently disabled as a remediation measure. The two credentials should be independent so that disabling or rotating one does not leave the other exposed.

Remediation: Generate the WPS PIN and WPA PSK as independent, distinct values. Prompt the user to set a unique Wi-Fi password during initial setup.

More information: See Web Interface Analysis chapter.