ATT Fiber Gateway Age

If you are getting the speed you are paying for and not having issues, there is no reason to update it.

Sorry, wrong. Tenable report on a series the U-Verse gateways, including one that was at my old house for nine years.

quote:

---

Synopsis
The remote device is affected by multiple vulnerabilities, including multiple remote code execution vulnerabilities.

Description
The remote Arris device's self report model is NVG589, NVG599 or 5268AC.
It is, therefor, affected by multiple vulnerabilities, including a firewall bypass, multiple instances of hardcoded credentials, privilege escalation, and remote code execution.

Note: Nessus has not checked the firmware version and is detecting this vulnerability based on the device's self reported model number.
Solution
No vendor-supplied fix is currently available. Contact vendor for further details.

---

This particular set of vulnerabilities was reported six years ago.

quote:

---

Exploit Ease: Exploits are available

---

The basic problem with getting a replacement is that you're going to have to take your gateway down, (at least intermittently) so AT&T can "see" the gateway is somehow faulty, in order to replace it. That's the only reason I let mine stick around as long as it did.

However, I also *always* had a router/firewall sitting directly behind it with all remote access functions disabled, and we didn't use the Wifi on the gateway itself at all.

It's wildly irresponsible of both Arris and AT&T to create (and leave in place) millions of IoT vulnerabilities across their devices across the country that can be exploited for DDoS attacks, snooping on household traffic, etc.

Some wrong in here. I just did this. I had an old pace gateway that I felt wasn’t working as good as I would have liked. It still worked though.

All I did was log into att and chatted with a rep. Told him I wanted a new one and literally the next day it was delivered. Then got an email saying to not even return the old one. They didn’t want it.