Tech Challenge

A co-working space upgrades its access point to WPA3-Personal but leaves WPA3/WPA2 transition mode enabled so older devices still connect, with the same passphrase used for both. The network team reports that members now get SAE's resistance to offline dictionary attacks. What can an attacker within radio range still do?

# hostapd.conf
ssid=WORKHUB
wpa=2
wpa_key_mgmt=SAE WPA-PSK        # WPA3-SAE + WPA2-PSK transition mode
wpa_passphrase=workhub-members-2026
rsn_pairwise=CCMP
ieee80211w=1                    # PMF capable, not required