CVE-2017-14117

The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP connections to intranet hosts by sending \x2a\xce\x01 followed by other predictable values.

• CWE-287

• http://www.securityfocus.com/bid/100585Third Party Advisory, VDB Entry
• https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/Third Party Advisory
• https://www.nomotion.net/blog/sharknatto/Exploit, Mitigation, Technical Description, Third Party Advisory
• http://www.securityfocus.com/bid/100585Third Party Advisory, VDB Entry
• https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/Third Party Advisory
• https://www.nomotion.net/blog/sharknatto/Exploit, Mitigation, Technical Description, Third Party Advisory

Published

Sep 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1411IBM Security Identity Governance Virtual Appliance 5.2 throu…5.9
• CVE-2017-14111The workstation logging function in Philips IntelliSpace Car…
• CVE-2017-14113Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-14114RTPproxy through 2.2.alpha.20160822 has a NAT feature that r…
• CVE-2017-14115The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 an…
• CVE-2017-14116The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 de…
• CVE-2017-14118In the EyesOfNetwork web interface (aka eonweb) 5.1-0, modul…
• CVE-2017-14119In the EyesOfNetwork web interface (aka eonweb) 5.1-0, modul…
• CVE-2017-1412IBM Security Identity Governance Virtual Appliance 5.2 throu…4.3
• CVE-2017-14120unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a dir…7.5
• CVE-2017-14121The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka …5.5
• CVE-2017-14122unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a sta…9.1