CVE-2017-14117
First published: Sun Sep 03 2017(Updated: )
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP connections to intranet hosts by sending \x2a\xce\x01 followed by other predictable values.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Att U-verse Firmware | =9.2.2h0d83 | |
| Commscope Arris Nvg589 | ||
| Commscope Arris Nvg599 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-14117?
CVE-2017-14117 is classified as a medium severity vulnerability due to the potential for remote exploitation.
How do I fix CVE-2017-14117?
To fix CVE-2017-14117, it is recommended to disable the unauthenticated proxy service or update to a firmware version that mitigates this vulnerability.
What products are affected by CVE-2017-14117?
CVE-2017-14117 affects the AT&T U-verse firmware version 9.2.2h0d83 used in Arris NVG589 and NVG599 devices.
What type of attackers can exploit CVE-2017-14117?
Remote attackers can exploit CVE-2017-14117 by establishing arbitrary TCP connections to intranet hosts.
In what mode does CVE-2017-14117 pose a risk?
CVE-2017-14117 poses a risk when the AT&T U-verse devices are not using IP Passthrough mode.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/att
- canonical/att u-verse firmware
- version/att u-verse firmware/9.2.2h0d83
- vendor/commscope
- canonical/commscope arris nvg589
- canonical/commscope arris nvg599