WPA2 Security Flaw in Arris SBG6580 Devices
CVE-2024-25729

8.8HIGH

Key Information:

Vendor

Arris

Status
SBG6580
Vendor
CVE Published:
8 March 2024

What is CVE-2024-25729?

Arris SBG6580 devices expose a vulnerability due to predictable default WPA2 security passwords. This issue arises because the passwords are derived from the first six characters of the SSID combined with the last six characters of the BSSID, with a decrement applied to the final octet. This predictability can be exploited, potentially allowing unauthorized users to gain remote access to the network.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://i.ebayimg.com/images/g/DhoAAOSwx0FbhhcN/s-l1600.jpg
https://i.ebayimg.com/images/g/z2oAAOSwO1pbQ9BS/s-l1600.jpg
https://github.com/actuator/cve/blob/main/Arris/SBG6580.png

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.