critical
Evil-twin AP mimicking the corporate SSID HQ, 3rd floor • 2.4 GHz
high
Consumer AP plugged into the corporate LAN Premium Branch, open-plan area • Dual-band
high
Sustained deauthentication flood (Wi-Fi DoS) Premium HQ, conference wing • 5 GHz
low
Unknown strong SSID flagged as a possible rogue Premium HQ, east windows • 2.4 GHz
medium
PMKID capture without a full 4-way handshake Premium Warehouse annex, guest WPA2-PSK network • 5 GHz
CWSP PenTest+ CySA+
high
Downgrade attack against a WPA3-transition SSID Premium HQ, exec floor pilot SSID • Dual-band
CWSP CWNA Security+
high
Rogue 802.1X/RADIUS credential harvesting Premium Remote office, staff onboarding laptops • 5 GHz
CWSP Security+ CySA+
low
A daily 'rogue' that is an employee's personal hotspot Premium HQ, 2nd floor near sales bullpen • 2.4/5 GHz
CWNA Security+