Read the docs

AT&T

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

AT&T records in CISA KEV

No AT&T vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xmill 13 records MEDIUM U-verse Firmware 4 records MEDIUM Winvnc 4 records HIGH Svr4 2 records MEDIUM Alienvault Ossim 1 record LOW Connect Participant Application 1 record LOW Mobileiron Sentry 1 record LOW Mobileiron Virtual Smartphone Platform 1 record LOW

Records

13 records in Xmill · all components

TI-2021-04874 CVE-2021-21829 · GHSA-whj6-8xvc-hmjm

Heap-based buffer overflow in AT&T

Priority MEDIUM 47

A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02545 Published 2021-08-13 No fix listed CWE-122
TI-2021-04875 CVE-2021-21830 · GHSA-jx9g-7qh9-qwj2

Heap-based buffer overflow in AT&T

Priority MEDIUM 46

A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmill 0.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02274 Published 2021-08-13 No fix listed CWE-122
TI-2021-04870 CVE-2021-21825 · GHSA-hfph-9grv-x5x5

Heap-based buffer overflow in AT&T

Priority MEDIUM 46

A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02274 Published 2021-08-18 No fix listed CWE-122
TI-2021-04873 CVE-2021-21828 · GHSA-4w6g-h3j2-26jm

Buffer overflow in AT&T

Priority MEDIUM 44

A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01136 Published 2021-08-20 No fix listed CWE-120
TI-2021-04872 CVE-2021-21827 · GHSA-q52q-979x-2v5q

Buffer overflow in AT&T

Priority MEDIUM 44

A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01136 Published 2021-08-20 No fix listed CWE-120
TI-2021-04871 CVE-2021-21826 · GHSA-37p7-4jpq-5264

Buffer overflow in AT&T

Priority MEDIUM 44

A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01136 Published 2021-08-20 No fix listed CWE-120
TI-2021-04856 CVE-2021-21811 · GHSA-fmqr-7vvj-9r72

Integer underflow in AT&T

Priority MEDIUM 44

A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xmill 0.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01136 Published 2021-08-31 No fix listed CWE-191
TI-2021-04855 CVE-2021-21810 · GHSA-f2g9-97mc-79j6

Heap-based buffer overflow in AT&T Labs

Priority MEDIUM 44

A memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T Labs’ Xmill 0.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01136 Published 2021-08-17 No fix listed CWE-122
TI-2021-04860 CVE-2021-21815 · GHSA-8vmp-q2rf-gr57

Out-of-bounds write in AT&T

Priority LOW 34

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2021-08-13 No fix listed CWE-787
TI-2021-04858 CVE-2021-21813 · GHSA-h458-372j-6g45

Out-of-bounds write in AT&T

Priority LOW 34

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2021-08-13 No fix listed CWE-787
TI-2021-04857 CVE-2021-21812 · GHSA-pvj2-qmqv-76p3

Out-of-bounds write in AT&T

Priority LOW 34

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’ Xmill 0.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2021-08-13 No fix listed CWE-787
Open these records in search →