Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 03/09/2017 Updated: 13/09/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 470

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote malicious users to establish arbitrary TCP connections to intranet hosts by sending \x2a\xce\x01 followed by other predictable values.

Vulnerable Product	Search on Vulmon	Subscribe to Product
att u-verse_firmware 9.2.2h0d83

CWE-287 https://www.nomotion.net/blog/sharknatto/https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/http://www.securityfocus.com/bid/100585 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-14117

Vulnerability Summary

References

Vulmon Search

About

Products

Connect