When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a carefully constructed wifi with the same name, which can lead to man-in-the-middle attacks.
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.