This can be exploited to brute force the WPS PIN, and allow recovery of the WPA password in an incredibly short amount of time, as opposed to the standard attack on WPA.

The push-button login feature on your router, called WPS, is definitely convenient, but it's not as secure as a strong password. Let us explain why.

The PIN-based method is mandatory for WPS-certified devices, which support it by default. Devices that are WPS-capable, but aren’t certified, are also likely to use the method.

And then there's WPS, or Wi-Fi Protected Setup, which allows people to connect devices up to their router merely by tapping a button on the router and inputting a special PIN number on the device ...

An attack tool for the WPS vulnerability called Reaver has been released and gives attackers the ability to get router PINs in a few hours.

WPS, as its known, is a protocol that allows a client Wi-Fi device to connect to a router using a PIN or a push-button and is widely regarded as being deeply insecure.