5.3
Medium
CVE-2022-20766 A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone…
Description
A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to an out-of-bounds read when processing Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to cause a service restart.Cisco has released firmware updates that address this vulnerability. There are no workarounds that address this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Analog Telephone Adaptor (ATA) Software | 12.0.1 | No fix stated |
| Cisco Analog Telephone Adaptor (ATA) Software | 11.2.1 | No fix stated |
| Cisco Analog Telephone Adaptor (ATA) Software | 11.1.0 | No fix stated |
| Cisco Analog Telephone Adaptor (ATA) Software | 2.15 | No fix stated |
| Cisco Analog Telephone Adaptor (ATA) Software | 2.14 | No fix stated |
| Cisco Analog Telephone Adaptor (ATA) Software | 1.34 | No fix stated |
| Cisco Analog Telephone Adaptor (ATA) Software 1.2 | 1.2.1 → 1.2.2 | No fix stated |
| Cisco Analog Telephone Adaptor (ATA) Software 1.1 | 1.1.0 → 1.1.2 | No fix stated |
| ata_190_firmware | Versions not published |
References
- cisco-sa-ata19x-multivuln-GEZYVvs sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Analog Telephone Adaptor (ATA) Software
The 17 CVEs of Cisco Analog Telephone Adaptor (ATA) Software →
CVE-2024-20463
A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could…
5.4
Medium
CVE-2024-20462
A vulnerability in the web-based management interface of Cisco ATA 190 Series Multiplatform Analog Telephone Adapter…
5.5
Medium
CVE-2024-20461
A vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an…
6.0
Medium
CVE-2024-20460
A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could…
6.1
Medium