Lucene search

K
nvd[email protected]NVD:CVE-2023-40039
HistorySep 11, 2023 - 7:15 a.m.

CVE-2023-40039

2023-09-1107:15:08
web.nvd.nist.gov
arris
wi-fi
default wpa2-psk
vulnerability
beacon frame
remote attacker

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%

An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame.

Affected configurations

NVD
Node
arristg852g_firmwareMatch-
AND
arristg852gMatch-
Node
arristg862g_firmwareMatch-
AND
arristg862gMatch-
Node
arristg1672g_firmwareMatch-
AND
arristg1672gMatch-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%

Related for NVD:CVE-2023-40039