Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows
reinstallation of the Integrity Group Temporal Key (IGTK) when processing a
Wireless Network Management (WNM) Sleep Mode Response frame, allowing an
attacker within radio range to replay frames from access points to clients.

mdeslaur