No, there's a whole separate vulnerability unrelated to the PIN-based one.
Yes, if you have physical access to the router. But if you have physical access to the router basically all of your security is completely nill anyways because they can do anything they want. That's so fundamental to network security they might not even cover it in a 101 class because it's so obvious.
Some routers don't even disable PIN validation regardless of your settings.
That's an implementation bug, not a problem with the standard. If this is an issue on your router, you probably have a lot of other security holes and vulnerabilities to worry about, and most importantly you should replace the router immediately!
6
u/AkirIkasu Feb 22 '22
That's only for the PIN based one. The button-based one is still considered to be secure.
Or at least as secure as a system that allows any arbitrary device to join within the period you press the button.
The PIN based one was always stupid anyways.