AT&T U-verse Arris Modems Multiple Security Vulnerabilities
BID:100585
CVE-2017-10793 | CVE-2017-14115 | CVE-2017-14116 | CVE-2017-14117 |Info
AT&T U-verse Arris Modems Multiple Security Vulnerabilities
| Bugtraq ID: | 100585 |
| Class: | Unknown |
| CVE: |
CVE-2017-10793 CVE-2017-14115 CVE-2017-14116 CVE-2017-14117 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 31 2017 12:00AM |
| Updated: | Aug 31 2017 12:00AM |
| Credit: | Nomotion |
| Vulnerable: |
AT&T U-verse 9.2.2h0d83 AT&T Arris NVG599 0 AT&T Arris NVG589 0 |
| Not Vulnerable: | |
Discussion
AT&T U-verse Arris Modems Multiple Security Vulnerabilities
AT&T U-verse Arris Modems are prone to following security vulnerabilities:
1. An Hardcoded Credential Security Bypass vulnerability.
2. An information-disclosure vulnerability
3. A command injection vulnerability
4. A security-bypass vulnerability
Attackers can exploit these issues to obtain sensitive information, execute arbitrary code and perform unauthorized actions., which may aid in further attacks. Failed exploit attempts may result in a denial-of-service condition.
AT&T U-verse Arris Modems are prone to following security vulnerabilities:
1. An Hardcoded Credential Security Bypass vulnerability.
2. An information-disclosure vulnerability
3. A command injection vulnerability
4. A security-bypass vulnerability
Attackers can exploit these issues to obtain sensitive information, execute arbitrary code and perform unauthorized actions., which may aid in further attacks. Failed exploit attempts may result in a denial-of-service condition.
References
AT&T U-verse Arris Modems Multiple Security Vulnerabilities
References:
References:
- Hardcoded Credentials Expose Customers of AT&T U-Verse (Tenable)
- AT&T Homepage (AT&T)
- Default Password '5SaP9I26' for 'remotessh' Account (Tenable)
- Nomotion Blog (nomotion)