CVE-2023-40039: Arris TG1672G Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame.

Affected products

• Arris TG1672G Firmware: affected versions not specified
• Arris TG852G Firmware: affected versions not specified
• Arris TG862G Firmware: affected versions not specified

Published 2023-09-11. Last modified 2026-06-17.