CVE-2017-14116

The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with the tech account and an empty password, which allows remote attackers to obtain root privileges by establishing a session on port 49955 and then installing new software, such as BusyBox with "nc -l" support.

• CWE-798

• http://www.securityfocus.com/bid/100585Third Party Advisory, VDB Entry
• https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/Third Party Advisory
• https://www.nomotion.net/blog/sharknatto/Exploit, Mitigation, Technical Description, Third Party Advisory
• http://www.securityfocus.com/bid/100585Third Party Advisory, VDB Entry
• https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/Third Party Advisory
• https://www.nomotion.net/blog/sharknatto/Exploit, Mitigation, Technical Description, Third Party Advisory

Published

Sep 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14108libgedit.a in GNOME gedit through 3.22.1 allows remote attac…
• CVE-2017-1411IBM Security Identity Governance Virtual Appliance 5.2 throu…5.9
• CVE-2017-14111The workstation logging function in Philips IntelliSpace Car…
• CVE-2017-14113Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-14114RTPproxy through 2.2.alpha.20160822 has a NAT feature that r…
• CVE-2017-14115The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 an…
• CVE-2017-14117The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 an…
• CVE-2017-14118In the EyesOfNetwork web interface (aka eonweb) 5.1-0, modul…
• CVE-2017-14119In the EyesOfNetwork web interface (aka eonweb) 5.1-0, modul…
• CVE-2017-1412IBM Security Identity Governance Virtual Appliance 5.2 throu…4.3
• CVE-2017-14120unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a dir…7.5
• CVE-2017-14121The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka …5.5