CVE-2023-40038

2023-12-2700:00:00

mitre

www.cve.org

cve-2023-40038

wpa2 psks

arris dg860a

arris dg1670a

predictable default

remote access

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.5%

JSON

Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit.)

References

github.com/actuator/cve/blob/main/Arris/CVE-2023-40038

i.ebayimg.com/images/g/ByAAAOSwQCFi2b50/s-l1600.jpg