CVE-2023-40039

Name of the Vulnerable Software and Affected Versions ARRIS TG852G (affected versions not specified) ARRIS TG862G (affected versions not specified) ARRIS TG1672G (affected versions not specified)

Description A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame. This issue affects ARRIS devices, allowing an attacker to potentially gain unauthorized access to the network.

Recommendations For ARRIS TG852G, update the device to a version that includes a fix for this issue, if available. For ARRIS TG862G, update the device to a version that includes a fix for this issue, if available. For ARRIS TG1672G, update the device to a version that includes a fix for this issue, if available. As a temporary workaround, consider changing the default WPA2-PSK value to a unique and strong password to minimize the risk of exploitation.