Known Vulnerabilities for products from Att
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Att".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Att can be found at device.report : Att
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-21830 | A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmil... | 9.8 - CRITICAL | 2021-08-13 | 2022-10-25 |
| CVE-2021-21829 | A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functional... | 9.8 - CRITICAL | 2021-08-13 | 2022-10-25 |
| CVE-2021-21828 | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0... | 9.8 - CRITICAL | 2021-08-20 | 2022-05-31 |
| CVE-2021-21827 | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0... | 9.8 - CRITICAL | 2021-08-20 | 2022-05-31 |
| CVE-2021-21826 | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0... | 9.8 - CRITICAL | 2021-08-20 | 2022-05-31 |
| CVE-2021-21825 | A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionalit... | 9.8 - CRITICAL | 2021-08-18 | 2022-05-31 |
| CVE-2021-21815 | A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmil... | 7.8 - HIGH | 2021-08-13 | 2022-05-13 |
| CVE-2021-21814 | Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command lin... | 7.8 - HIGH | 2021-08-13 | 2022-10-06 |
| CVE-2021-21813 | Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command lin... | 7.8 - HIGH | 2021-08-13 | 2022-10-06 |
| CVE-2021-21812 | A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’ Xm... | 7.8 - HIGH | 2021-08-13 | 2022-05-13 |
| CVE-2021-21811 | A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xmill 0.7. A sp... | 9.8 - CRITICAL | 2021-08-31 | 2022-07-21 |
| CVE-2021-21810 | A memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T Labs’ Xmill 0.7. A specially... | 9.8 - CRITICAL | 2021-08-17 | 2022-07-21 |
| CVE-2020-22650 | A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service (DOS) via a system crash tri... | 7.5 - HIGH | 2021-07-19 | 2021-07-29 |
| CVE-2017-14117 | The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configure... | 5.9 - MEDIUM | 2017-09-03 | 2017-09-13 |
| CVE-2017-14116 | The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access... | 8.1 - HIGH | 2017-09-03 | 2017-09-13 |
| CVE-2017-14115 | The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configure... | 8.1 - HIGH | 2017-09-03 | 2021-08-23 |
| CVE-2017-10793 | The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is... | 8.1 - HIGH | 2017-09-03 | 2021-08-23 |
| CVE-2013-7286 | MobileIron VSP < 5.9.1 and Sentry < 5.0 has a weak password obfuscation algorithm | 7.5 - HIGH | 2020-02-12 | 2021-07-28 |
| CVE-2013-6029 | Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to e... | 6.8 - MEDIUM | 2013-12-04 | 2016-12-31 |
| CVE-2012-2980 | The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Sh... | 7.1 - HIGH | 2012-08-21 | 2012-08-21 |
Known software with vulnerabilities from Att
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Att | Communication Manager | 5.1 |
| Application | Att | Connect Participant Application | 8.5.71 |
| Application | Att | Labs Natural Voices Desktop Redist | 1.4.0916 |
| Application | Att | Natural Voices Crystal 16k | 1.4.0011 |
| Application | Att | Natural Voices Mike 16k | 1.4.0011 |
| Hardware | Att | Status | - |