U-verse Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

UF

Product

U-verse Firmware

by Att · last CVE Sep 3, 2017

4

CVEs

0

On KEV

8.1

Max CVSS

0

New 30D

Vulnerabilities4 In the news0 Timeline

Severity mix

Critical 0High 3Medium 1Low 0

Severity

All severities4 Critical0 High3 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add U-verse Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-14116	8.1	3%	Sep 3	The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with the tech account and… Affected: 9.2.2h0d83
CVE-2017-14115	8.1	4%	Sep 3	The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh… Affected: 9.2.2h0d83
CVE-2017-10793	8.1	3%	Sep 3	The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, configures an sbdc.ha WAN TCP service on… Affected: 9.2.2h0d83
CVE-2017-14117	5.9	8%	Sep 3	The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port… Affected: 9.2.2h0d83