CVE Daily

CVE-2023-40038

Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could l...

High CVSS 8.8

Overview

Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit.)

CWE: CWE-287 Published: 2023-12-27T20:15:19.230
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.8 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags