CVE-2023-40039 - OpenCVE

An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Arris	Tg1672g Tg1672g Firmware Tg852g Tg852g Firmware Tg862g Tg862g Firmware

Configuration 1 [-]

AND

cpe:2.3:o:arris:tg852g_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arris:tg852g:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:arris:tg862g_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arris:tg862g:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:arris:tg1672g_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arris:tg1672g:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40039
https://i.ebayimg.com/images/g/-UcAAOSwDe1kyD-Z/s-l1600.png
https://i.ebayimg.com/images/g/4P0AAOSwdhxkrZtt/s-l1600.jpg

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-09-11T00:00:00

Updated: 2024-08-02T18:24:54.779Z

Reserved: 2023-08-08T00:00:00

Link: CVE-2023-40039

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2023-09-11T07:15:08.123

Modified: 2023-09-13T14:30:58.217

Link: CVE-2023-40039

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:arris:tg852g_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F8EABAC0-71D7-46FE-AB5F-10BBD5B3FC76", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:arris:tg852g:-:*:*:*:*:*:*:*", "matchCriteriaId": "584B9F3B-7F6E-456D-B565-26CC69807A66", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:arris:tg862g_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B0965F2C-824E-403E-8A0D-87AA74B50723", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:arris:tg862g:-:*:*:*:*:*:*:*", "matchCriteriaId": "446FE1F0-CA71-487F-9027-6EFC1A6F6AA3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:arris:tg1672g_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DFA1BE57-DD35-4EDE-A4E5-BB775159275D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:arris:tg1672g:-:*:*:*:*:*:*:*", "matchCriteriaId": "26765359-B66A-48F5-B670-83AB46FF3BDD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en los dispositivos ARRIS TG852G, TG862G y TG1672G. Un atacante remoto (cerca de una red Wi-Fi) puede derivar el valor WPA2-PSK predeterminado observando un trama beacon."}], "id": "CVE-2023-40039", "lastModified": "2023-09-13T14:30:58.217", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-09-11T07:15:08.123", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40039"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://i.ebayimg.com/images/g/-UcAAOSwDe1kyD-Z/s-l1600.png"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://i.ebayimg.com/images/g/4P0AAOSwdhxkrZtt/s-l1600.jpg"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}