[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnZ4nQcOLoyUnCCgXLk_H_gBW9DEyVN3PKKAO2mgiWu8":3,"g5a-risk:CVE-2017-14116":132},{"success":4,"data":5,"meta":130},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":52,"references":53,"referencesCount":77,"weaknesses":78,"weaknessesCount":87,"isActivelyExploited":88,"cisaInfo":15,"otxData":15,"relatedBlogPosts":89,"seoMetadata":90,"configurations":115,"relatedVendorCves":128,"notableEvents":129},"CVE-2017-14116","What is CVE-2017-14116?","The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with the tech account and an empty password, which allows remote attackers to obtain root privileges by establishing a session on port 49955 and then installing new software, such as BusyBox with \"nc -l\" support.","The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service wit...","2017-09-03T19:29:00.3","2025-04-20T01:37:25.86",8.1,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":28,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","UNCHANGED",2.2,5.9,[29],{"Source":18,"Type":19,"CVSSData":30,"BaseSeverity":23,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":31,"VectorString":32,"AccessVector":22,"AccessComplexity":33,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","COMPLETE",9.3,8.6,10,0.03342,[38,38,38,38,38,38,38],"High",[42,47],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"att","u-verse_firmware","9.2.2h0d83","cpe:2.3:o:att:u-verse_firmware:9.2.2h0d83:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"commscope","arris_nvg599","-","cpe:2.3:h:commscope:arris_nvg599:-:*:*:*:*:*:*:*",2,[54,60,64,71,73,75],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F100585","Securityfocus",[58,59],"Third Party Advisory","VDB Entry",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fthreatpost.com\u002Fbugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks\u002F127753\u002F","Threatpost",[58],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fwww.nomotion.net\u002Fblog\u002Fsharknatto\u002F","Nomotion",[68,69,70,58],"Exploit","Mitigation","Technical Description",{"url":55,"source":56,"tags":72},[58,59],{"url":61,"source":62,"tags":74},[58],{"url":65,"source":66,"tags":76},[68,69,70,58],6,[79],{"id":80,"name":81,"description":82,"extendedDescription":83,"status":84,"abstraction":85,"structure":86},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:","Draft","Base","Simple",1,false,[],{"title":91,"metaDescription":92,"keywords":93,"canonicalUrl":94,"structuredData":95},"What is CVE-2017-14116? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-14116, a high severity cyber security vulnerability from 2017. The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 d...","CVE-2017-14116, CVE-2017-14116 vulnerability, CVE-2017-14116 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, att security, commscope security, u-verse_firmware vulnerability, arris_nvg599 vulnerability","\u002Fwhat-is\u002Fcve-2017-14116",{"@context":96,"@type":97,"headline":91,"description":92,"datePublished":10,"dateModified":11,"author":98,"publisher":102,"about":106,"mainEntityOfPage":110,"articleSection":113,"keywords":114},"https:\u002F\u002Fschema.org","TechArticle",{"@type":99,"name":100,"url":101},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":99,"name":100,"url":101,"logo":103},{"@type":104,"url":105},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":107,"name":6,"description":108,"additionalType":109},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":111,"@id":112},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-14116","Cybersecurity","CVE-2017-14116, CVE-2017-14116 vulnerability, CVE-2017-14116 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[116],{"Operator":117,"Negate":15,"Nodes":118},"AND",[119,124],{"Operator":120,"Negate":15,"CPEMatch":121},"OR",[122],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":123,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1842B6DE-8E24-4B2C-BE3E-8E9447BDD3ED",{"Operator":120,"Negate":15,"CPEMatch":125},[126],{"Vulnerable":15,"Criteria":51,"MatchCriteriaID":127,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"16D58B7B-3A60-4FBE-9B78-F1E3BB6EB584",[],[],{"lastModified":11,"cacheTime":131,"version":31},1792375349406,{"score":133,"band":134,"action":135,"scoredAt":136},54,"Medium","Plan remediation","2026-10-17T09:11:40.629989+00:00"]