I’ve updated a Mikrotik rb951g-2hnd from Ros 6.34.4 to 6.40.4. I was using wireless-fp which had no WPS. After the update I see that WPS is there and defaulted to push button. I only noticed this configuration change after an hour. Was I exposed during this time or is WPS push button secure ?
It is secure as long as you don’t push the button…
Yes. But is it susceptible to remote brute force like the pin method. Has PBC been implemented correctly where one doesn’t need to worry, unless by pressing the button