CVE-2017-14117: Medium severity att u-verse firmware vulnerability
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP connections to intranet hosts by sending \x2a\xce\x01 followed by other predictable values.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14117?
CVE-2017-14117 is classified as a medium severity vulnerability due to the potential for remote exploitation.
How do I fix CVE-2017-14117?
To fix CVE-2017-14117, it is recommended to disable the unauthenticated proxy service or update to a firmware version that mitigates this vulnerability.
What products are affected by CVE-2017-14117?
CVE-2017-14117 affects the AT&T U-verse firmware version 9.2.2h0d83 used in Arris NVG589 and NVG599 devices.
What type of attackers can exploit CVE-2017-14117?
Remote attackers can exploit CVE-2017-14117 by establishing arbitrary TCP connections to intranet hosts.
In what mode does CVE-2017-14117 pose a risk?
CVE-2017-14117 poses a risk when the AT&T U-verse devices are not using IP Passthrough mode.