Known Vulnerabilities for products from Att
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Att".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Att can be found at device.report : Att
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-26507 json | ** UNSUPPORTED WHEN ASSIGNED ** A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0... | 9.8 - CRITICAL | 2022-04-14 | 2023-11-07 |
| CVE-2021-21830 json | A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmil... | 9.8 - CRITICAL | 2021-08-13 | 2022-10-25 |
| CVE-2021-21829 json | A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functional... | 9.8 - CRITICAL | 2021-08-13 | 2022-10-25 |
| CVE-2021-21828 json | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0... | 9.8 - CRITICAL | 2021-08-20 | 2022-05-31 |
| CVE-2021-21827 json | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0... | 9.8 - CRITICAL | 2021-08-20 | 2022-05-31 |
| CVE-2021-21826 json | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0... | 9.8 - CRITICAL | 2021-08-20 | 2022-05-31 |
| CVE-2021-21825 json | A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionalit... | 9.8 - CRITICAL | 2021-08-18 | 2022-05-31 |
| CVE-2021-21815 json | A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmil... | 7.8 - HIGH | 2021-08-13 | 2022-05-13 |
| CVE-2021-21814 json | Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command lin... | 7.8 - HIGH | 2021-08-13 | 2022-10-06 |
| CVE-2021-21813 json | Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command lin... | 7.8 - HIGH | 2021-08-13 | 2022-10-06 |
| CVE-2021-21812 json | A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’ Xm... | 7.8 - HIGH | 2021-08-13 | 2022-05-13 |
| CVE-2021-21811 json | A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xmill 0.7. A sp... | 9.8 - CRITICAL | 2021-08-31 | 2022-07-21 |
| CVE-2021-21810 json | A memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T Labs’ Xmill 0.7. A specially... | 9.8 - CRITICAL | 2021-08-17 | 2022-07-21 |
| CVE-2020-22650 json | A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service (DOS) via a system crash tri... | 7.5 - HIGH | 2021-07-19 | 2021-07-29 |
| CVE-2017-14117 json | The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configure... | 5.9 - MEDIUM | 2017-09-03 | 2017-09-13 |
| CVE-2017-14116 json | The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access... | 8.1 - HIGH | 2017-09-03 | 2017-09-13 |
| CVE-2017-14115 json | The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configure... | 8.1 - HIGH | 2017-09-03 | 2021-08-23 |
| CVE-2017-10793 json | The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is... | 8.1 - HIGH | 2017-09-03 | 2021-08-23 |
| CVE-2013-7286 json | MobileIron VSP < 5.9.1 and Sentry < 5.0 has a weak password obfuscation algorithm | 7.5 - HIGH | 2020-02-12 | 2021-07-28 |
| CVE-2013-6029 json | Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to e... | 6.8 - MEDIUM | 2013-12-04 | 2016-12-31 |
Known software with vulnerabilities from Att
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Att | Communication Manager | 5.1 |
| Application | Att | Connect Participant Application | 8.5.71 |
| Application | Att | Labs Natural Voices Desktop Redist | 1.4.0916 |
| Application | Att | Natural Voices Crystal 16k | 1.4.0011 |
| Application | Att | Natural Voices Mike 16k | 1.4.0011 |
| Hardware | Att | Status | - |