CVE-2024-25729

Arris SBG6580 devices have predictable default WPA2 security passwords that could lead to unauthorized remote access. They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last octet...

CVE-2024-25729

The CVE-2024-25729 entry concerns Arris SURFboard SBG6580 devices. The issue is that the WPA2 security password is predictable: it’s generated from the first 6 characters of the SSID and the last 6 characters of the BSSID with the last octet decremented, which could allow unauthorized remote acce...

CVE-2024-23618

An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root...

Remote code execution

An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root...

Arris SURFboard SGB6950AC2 Access Control Error Vulnerability

The Arris SURFboard SGB6950AC2 is a wireless router from Arris USA. A security vulnerability exists in the Arris SURFboard SGB6950AC2 that stems from the presence of an arbitrary code execution vulnerability...

CVE-2024-23618 Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability

An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root...

CVE-2024-23618

CVE-2024-23618 affects Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can achieve code execution as root, with network-based exploit characteristics reported (CVSS 3.1/CRITICAL, high impact on confidentiality, integrity, and availability). The available documents confirm the vuln...

CVE-2024-23618 Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability

An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root...

PT-2024-19973 · Arris · Arris Surfboard Sgb6950Ac2

Name of the Vulnerable Software and Affected Versions: Arris SURFboard SGB6950AC2 affected versions not specified Description: An arbitrary code execution issue exists, allowing an unauthenticated attacker to achieve code execution as root. Recommendations: At the moment, there is no information...

CVE-2023-40038

Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit...

CVE-2023-40038

Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit...

CVE-2023-40038

Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit...

Default credentials

Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit...

PT-2023-27229 · Arris · Arris Dg860A +1

Name of the Vulnerable Software and Affected Versions: Arris DG860A affected versions not specified Arris DG1670A affected versions not specified Description: The devices have predictable default WPA2 PSKs, which could lead to unauthorized remote access. They use the first 6 characters of the SSI...

CVE-2023-40038

The CVE-2023-40038 entry concerns Arris DG860A and DG1670A devices with predictable default WPA2 PSKs. The root issue is a derivation scheme that combines the first 6 characters of the SSID and the last 6 characters of the BSSID (with the last digit decremented), yielding easily guessable credent...

CVE-2023-40038

Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit...

CommScope Arris DG860A Security Vulnerability

The CommScope Arris DG860A is a cable modem and wireless router combination device. A security vulnerability exists in the CommScope Arris DG860A, DG1670A that stems from having a predictable default WPA2 PSK that could lead to unauthorized remote access...

VulnCheck KEV: CVE-2022-31793

dorequest in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589,...

CVE-2023-40039

An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame...

CVE-2023-40039

An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame...