CVE-2024-23726: Ubeeinteractive DDW365 Firmware

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame. A PSK is generated by using the first six characters of the SSID and the last six of the BSSID, decrementing the last digit.

Affected products

• Ubeeinteractive DDW365 Firmware: affected versions not specified

Published 2024-01-21. Last modified 2026-06-17.