What’s Vulnerable › Vulnerabilities

CVE-2023-40039

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-11 · updated 2026-06-17
• Weakness: CWE-284

Description

An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame.

Affected products

• Arris Tg1672G Firmware: all versions
• Arris Tg852G Firmware: all versions
• Arris Tg862G Firmware: all versions

References

• https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40039
• https://i.ebayimg.com/images/g/-UcAAOSwDe1kyD-Z/s-l1600.png
• https://i.ebayimg.com/images/g/4P0AAOSwdhxkrZtt/s-l1600.jpg
• https://github.com/actuator/cve/blob/main/Arris/CVE-2023-40039
• https://i.ebayimg.com/images/g/-UcAAOSwDe1kyD-Z/s-l1600.png
• https://i.ebayimg.com/images/g/4P0AAOSwdhxkrZtt/s-l1600.jpg

Get alerted when CVE-2023-40039 or the next vulnerability affects your stack