high8.8
CVE-2023-40038
Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access.
Impact
Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit.)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arris | Dg860a Firmware | All versions |
| Arris | Dg1670a Firmware | Version ts0901203b6_020420_16xx.gw_pc20_tw |