yes, what was discovered is that no matter what master key was exchanged after the radius authentication, the attacker can still hijack the device.