Tleuberdin S., Issainova A., Adamova A., Aidynov T., Samashova G., Satybaldina D.
Analysis of vulnerabilities and practical attacks on WPA3-enterprise in corporate wireless networks // Procedia Computer Science. — 2025. — DOI: 10.1016/j.procs.2025.10.256.

Abstract: WPA3 is the latest wireless security standard designed to improve upon WPA2 by introducing stronger authentication and encryption mechanisms, including Simultaneous Authentication of Equals (SAE) and Protected Management Frames (PMF). However, recent studies show that WPA3 still contains exploitable vulnerabilities. This paper provides a comprehensive analysis of WPA3 security weaknesses and demonstrates practical attack scenarios, including SAE handshake dictionary attacks, downgrade attacks, Evil Twin access point spoofing, and PMF-related issues. Experiments were conducted in a controlled laboratory environment using specialized tools and hardware. The results show that both confidentiality and availability can be compromised under certain conditions, despite the protocol’s improved security design. The paper concludes with recommendations for users, administrators, and device manufacturers to enhance WPA3 deployment security.

Link / DOI: https://doi.org/10.1016/j.procs.2025.10.256