The article says it uses a second vuln that forces the device to connect to a specific network.