CVE-2023-40038

Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access

published December 27, 2023

CVSS
—
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00358 · 28.3th percentile
Published
2023-12-27T00:00Z
EPSS history
Timeline
  • 27 DEC 00:00Z
    Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access
    cvelistv5