CVE-2023-40038
HIGH
8,8
Source: [email protected]
Attack Vector: adjacent_network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Description
AI Translation Available
Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit.)
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0006
Percentile
0,2th
Updated
EPSS Score Trend (Last 90 Days)
287
Improper Authentication
DraftCommon Consequences
Security Scopes Affected:
Integrity
Confidentiality
Availability
Access Control
Potential Impacts:
Read Application Data
Gain Privileges Or Assume Identity
Execute Unauthorized Code Or Commands
Applicable Platforms
Technologies:
ICS/OT, Not Technology-Specific, Web Based
Operating System
Dg860A Firmware by Arris
CPE Identifier
View Detailed Analysis
cpe:2.3:o:arris:dg860a_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Dg1670A Firmware by Arris
CPE Identifier
View Detailed Analysis
cpe:2.3:o:arris:dg1670a_firmware:ts0901203b6_020420_16xx.gw_pc20_tw:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40038
https://i.ebayimg.com/images/g/ByAAAOSwQCFi2b50/s-l1600.jpg
https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40038
https://i.ebayimg.com/images/g/ByAAAOSwQCFi2b50/s-l1600.jpg