CVE-2017-14117

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/wproxy/attopenproxy.py 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:54+00:00| seen|...

Open WAN-to-LAN proxy on AT&T routers

The Arris NVG589 and NVG599 routers configured with AT U-verse firmware 9.2.2h0d83 expose an un-authenticated proxy that allows connecting from WAN to LAN by MAC address. !/usr/bin/env python3 from metasploit import module, probescanner metadata = 'name': 'Open WAN-to-LAN proxy on AT&T routers',...

CVE-2017-14117

The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP connections to intranet hosts by sending \x2a\xce\x01...

CVE-2017-14117

The CVE-2017-14117 vulnerability affects AT&T U-verse firmware 9.2.2h0d83 on Arris NVG589/NVG599 when IP Passthrough is not used. It configures an unauthenticated proxy service on WAN TCP port 49152, allowing remote attackers to establish arbitrary TCP connections to intranet hosts by sending the...

CVE-2017-14117

The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP connections to intranet hosts by sending \x2a\xce\x01...