Att vulnerabilitiesNone on the known-exploited list.
Att has 29 published vulnerabilities across 16 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Xmill, with 13. If you run Att software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Att products have the most vulnerabilities?
Xmill leads with 13 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Att vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Att's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Att flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 71%CVE-2001-0168Critical
Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
- 51%CVE-2001-0167High
Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.
- 8.0%CVE-2017-14117Medium
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to...
- 4.4%CVE-2017-14115High
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh account with the 5SaP9I26 password,...
- 4.2%CVE-1999-1059Critical
Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands.
- 3.3%CVE-2017-14116High
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with the tech account and an empty password, which allows...
- 2.8%CVE-2017-10793High
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, configures an sbdc.ha WAN TCP service on port 61001 with the bdctest account and...
- 2.5%CVE-2021-21829Critical
A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7.
- 2.5%CVE-2013-6029Medium
Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to execute arbitrary code via a malformed .SVT file.
- 2.4%CVE-2022-26507Critical
A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7.
All Att products we track.
15 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Xmillxmill13 vulnerabilities1 version
- U-Verse Firmwareu-verse_firmware4 vulnerabilities1 version
- Winvncwinvnc4 vulnerabilities2 versions
- Svr4svr42 vulnerabilities1 version
- Alienvault Ossimalienvault_ossim1 vulnerability1 version
- Connect Participant Applicationconnect_participant_application1 vulnerability9 versions
- Mobileiron Sentrymobileiron_sentry1 vulnerability1 version
- Mobileiron Virtual Smartphone Platformmobileiron_virtual_smartphone_platform1 vulnerability1 version
- Vncvnc1 vulnerability5 versions
- Winvnc Serverwinvnc_server1 vulnerability1 version
- Communication Managercommunication_manager0 vulnerabilities16 versions
- Labs' Natural Voices Desktop Redistlabs\'_natural_voices_desktop_redist0 vulnerabilities1 version
- Natural Voices Crystal 16knatural_voices_crystal_16k0 vulnerabilities1 version
- Natural Voices Mike 16knatural_voices_mike_16k0 vulnerabilities1 version
- U-Verseu-verse0 vulnerabilities1 version
This directory lists the 15 Att products with at least one tracked version, of 16 in our catalogue.
Running Att? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
- Matched to
- Winvnc on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 29 published vulnerabilities across 16 products and 43 versions from Att.
None of Att's vulnerabilities is on the list of flaws known to be exploited today.
Xmill, with 13 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Att products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.