In WPA3, how would one attack the AES-encrypted connection?

In WPA3, how would one attack the AES-encrypted connection?

WPA3 uses AES-128 for message encryption in Personal and 192 bits in Enterprise. Thus the secret of communication is kept using this symmetric encryption protocol. As I have understood, security problems in wireless networks usually tend to arise

• Not due to the encryption algorithm used
  • Using AES 128 would mean trying 2¹²⁸ combinations, and given the current computing technologies this process is computationally intractable in human feasible time
• But instead due to the password used
  • Simple passwords would help reduce the space of possible passwords in a dictionary attack, hence the recommendations of using more elaborated passwords.
• Or instead due to the key sharing process (the handshake)

Is my understanding of this correct?

To be more precise, WPA3 uses AES-CCMP because AES alone only provides data encryption, it does not guarantee integrity or authentication, but CCMP provides both integrity because it makes sure that the original message was not tampered with, thus proving authenticity. Is this information pointing in the right direction? If this is correct, could someone please elaborate a little bit more on this?