Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit.)
References
Link | Resource |
---|---|
https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40038 | Third Party Advisory |
https://i.ebayimg.com/images/g/ByAAAOSwQCFi2b50/s-l1600.jpg | Product |
https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40038 | Third Party Advisory |
https://i.ebayimg.com/images/g/ByAAAOSwQCFi2b50/s-l1600.jpg | Product |
Configurations
History
21 Nov 2024, 08:18
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40038 - Third Party Advisory | |
References | () https://i.ebayimg.com/images/g/ByAAAOSwQCFi2b50/s-l1600.jpg - Product |
04 Jan 2024, 16:18
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40038 - Third Party Advisory | |
References | () https://i.ebayimg.com/images/g/ByAAAOSwQCFi2b50/s-l1600.jpg - Product | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
CWE | CWE-287 | |
CPE | cpe:2.3:h:arris:dg1670a:-:*:*:*:*:*:*:* cpe:2.3:h:arris:dg860a:-:*:*:*:*:*:*:* cpe:2.3:o:arris:dg1670a_firmware:ts0901203b6_020420_16xx.gw_pc20_tw:*:*:*:*:*:*:* cpe:2.3:o:arris:dg860a_firmware:-:*:*:*:*:*:*:* |
27 Dec 2023, 21:37
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-12-27 20:15
Updated : 2024-11-21 08:18
NVD link : CVE-2023-40038
Mitre link : CVE-2023-40038
CVE.ORG link : CVE-2023-40038
JSON object : View
Products Affected
arris
- dg1670a
- dg1670a_firmware
- dg860a
- dg860a_firmware
CWE
CWE-287
Improper Authentication