“Additionally, we conducted measurement studies on 93 real-world Wi-Fi networks and found that 75 (81%) of them were susceptible to this attack.”
52 of 67 routers from 24 of 30 vendors let a stranger on the same coffee shop Wi-Fi find your connection’s port and sequence numbers and inject into it. Killing an SSH session took 17.5 seconds on average. The cause is routers skipping sequence number checks “for performance reasons.” WPA3 and AP isolation don’t help when the router itself does the attacker’s work.