Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.1

AT&T U-verse firmware may expose Wi‑Fi password

CVE-2017-10793 · published 9 years ago
Summary

The U‑verse firmware version 9.2.2h0d83 on certain Arris routers creates a hidden network service on port 61001 that includes a default username and password. An attacker who knows the router's hardware ID could use this to retrieve sensitive data such as the Wi‑Fi password. Update the router firmware to the latest version or disable the unused service if possible, and change any default passwords.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
att u-verse_firmware 9.2.2h0d83
cpe:2.3:o:att:u-verse_firmware:9.2.2h0d83:*:*:*:*:*:*:*
Original advisory text
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, configures an sbdc.ha WAN TCP service on port 61001 with the ...
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, configures an sbdc.ha WAN TCP service on port 61001 with the bdctest account and the bdctest password, which allows remote attackers to obtain sensitive information (such as the Wi-Fi password) by leveraging knowledge of a hardware identifier, related to the Bulk Data Collection (BDC) mechanism defined in Broadband Forum technical reports.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
8.1 High
Exploitation
3% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published3 Sep 2017
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2017-10793 · NVD
Track software like this
Free during beta