Wifi Airstrike Attack (CVE-2021-28316) already mitigated Apr 13, 2021

[itm4n]

Wifi Airstrike Attack (CVE-2021-28316) already mitigated Apr 13, 2021

[itm4n]

Hello,
Thank you for your message.
I'm aware of this "fix" but, last time I checked, I was still able to perform a similar attack to capture the credentials of the computer account, and or the logged-on user (locked session).
The problem with this CVE is that it is unclear what exactly was remediated.
So, this check is rather about ensuring that it is not possible to select an arbitrary Wi-Fi network from the lock screen as a preventive measure.
That being said, I agree with you on the fact that the reference to "Airstrike" may be a bit misleading.

[itm4n]

Hey!
I modified the title and description to avoid confusion in the future.

+------+------------------------------------------------+------+
| TEST | NETWORK > Select network from lock screen      | INFO |
+------+------------------------------------------------+------+
| DESC | Checks whether the 'Do not display network selection  |
|      | UI' policy is enforced on workstations (c.f.          |
|      | Airstrike attack).                                    |
+------+-------------------------------------------------------+