Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit.)
References
Link | Resource |
---|---|
https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40038 | Third Party Advisory |
https://i.ebayimg.com/images/g/ByAAAOSwQCFi2b50/s-l1600.jpg | Product |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2023-12-27T00:00:00
Updated: 2023-12-27T20:10:35.822453
Reserved: 2023-08-08T00:00:00
Link: CVE-2023-40038
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-12-27T20:15:19.230
Modified: 2024-01-04T16:18:01.263
Link: CVE-2023-40038
JSON object: View
Redhat Information
No data.
CWE