CVE-2017-14115

Опубликовано: 03 сент. 2017

Источник: nvd

CVSS3: 8.1

CVSS2: 9.3

EPSS Низкий

Описание

The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh account with the 5SaP9I26 password, which allows remote attackers to access a "Terminal shell v1.0" service, and subsequently obtain unrestricted root privileges, by establishing an SSH session and then entering certain shell metacharacters and BusyBox commands.

Ссылки

http://www.securityfocus.com/bid/100585
Third Party Advisory
VDB Entry
https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/
Third Party Advisory
https://www.nomotion.net/blog/sharknatto/
Exploit
Mitigation
Technical Description
Third Party Advisory
http://www.securityfocus.com/bid/100585
Third Party Advisory
VDB Entry
https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/
Third Party Advisory
https://www.nomotion.net/blog/sharknatto/
Exploit
Mitigation
Technical Description
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:att:u-verse_firmware:9.2.2h0d83:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:commscope:arris_nvg589:-:*:*:*:*:*:*:*

cpe:2.3:h:commscope:arris_nvg599:-:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04024

Низкий

8.1 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-798

Связанные уязвимости

GHSA-9pg3-r76h-43mh