What is the attack performed in the above scenario?

An attacker identified that a user and an access point are both compatible with WPA2 and WPA3 encryption. The attacker installed a rogue access point with only WPA2 compatibility in the vicinity and forced the victim to go through the WPA2 four-way handshake to get connected. After the connection was established, the attacker used automated tools to crack WPA2-encrypted messages .

What is the attack performed in the above scenario?
A . Timing-based attack
B . Side-channel attack
C . Downgrade security attack
D . Cache-based attack

Answer: A

Subscribe
Notify of
guest
1 Comment
Inline Feedbacks
View all comments
aspandey1201
aspandey1201
1 year ago

Module 16 Page 2306 CEH Training v11:
Downgrade Security Attacks To launch this attack, the client and AP should support both WPA3 and WPA2 encryption mechanisms. Here, the attacker forces the user to follow the older encryption method, WPA2, to connect to the network. Here is one way to implement a downgrade security attack:

Exploiting backward compatibility: If a user and AP are compatible with both WPA2 and WPA3 encryption mechanisms, then the attacker installs a rogue AP with only WPA2 compatibility in the vicinity and forces the client to go through the four-way handshake (WPA2) to get connected. Once the connection is established, the attacker uses all the attack tools available to exploit or crack the WPA2 encryption.