CVE-2023-40039

An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices

published September 11, 2023

CVSS
—
EPSS
1%
Percentile
68.1
In the wild
Unconfirmed
What it is

⚠️ A nearby attacker can snag your default Wi-Fi password like a thief nabbing a package from a porch! 📦 Think of your Wi-Fi beacon frame as a giant shipping label on a package left at your door, revealing exactly what's inside. If someone can see that label, they could easily figure out how to break into your house and steal your valuables—like your precious online data! If exploited, this vulnerability allows a crafty attacker to derive your default WPA2-PSK value, giving them unauthorized access to your network. Imagine someone strolling by your house, casually connecting to your Wi-Fi, and snooping through your digital stuff—absolutely terrifying!

Put simply

Think of your Wi-Fi beacon frame as a giant shipping label on a package left at your door, revealing exactly what's inside. If someone can see that label, they could easily figure out how to break into your house and steal your valuables—like your precious online data! This vulnerability exists in ARRIS TG852G, TG862G, and TG1672G devices, where a remote attacker can observe a beacon frame to reveal the default WPA2-PSK value, effectively letting them into your network without any effort on their part.

What to do

If exploited, this vulnerability allows a crafty attacker to derive your default WPA2-PSK value, giving them unauthorized access to your network. Imagine someone strolling by your house, casually connecting to your Wi-Fi, and snooping through your digital stuff—absolutely terrifying! To protect yourself, change the default WPA2-PSK value immediately and ensure your router's firmware is up to date. Additionally, consider disabling remote management features that may expose you further. Don't forget to routinely check your network settings! You've got this! With these steps, you'll be on your way to securing your Wi-Fi like a pro! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01207 · 68.1th percentile
Published
2023-09-11T00:00Z
EPSS history
Timeline
  • 11 SEP 00:00Z
    An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices
    cvelistv5