CVE-2017-14115 The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh account with the 5Sa...
HighCVSS 8.1
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh account with the 5SaP9I26 password, which allows remote attackers to access a "Terminal shell v1.0" service, and subsequently obtain unrestricted root privileges, by establishing an SSH session and then entering certain shell metacharacters and BusyBox commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| att u-verse firmware | = 9.2.2h0d83 | No fix listed |
References
- 100585 third-party-advisory vdb-entry
- threatpost.com third-party-advisory
- www.nomotion.net exploit mitigation technical-description third-party-advisory