← CVE Intelligence

CVE-2022-20766

Cisco ATA 190 Series Analog Telephone Adapter firmware Cisco Discovery Protocol Denial of Service Vulnerability PUBLISHED

Description (CNA)

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to an out-of-bounds read when processing Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to cause a service restart.Cisco has released firmware updates that address this vulnerability. There are no workarounds that address this vulnerability.

Affected (CNA)

Vendor / productVersions
Cisco / Cisco Analog Telephone Adaptor (ATA) Softwareaffected 2.16(1); affected 2.16(2); affected 2.1(6); affected 2.14; affected 3.2(0); affected 1.1(4); affected 2.1(5); affected 3.2(1); affected 2.15; affected 1.0(0); affected 1.34; affected 3.1(1); affected 3.2(4); affected 3.0(0); affected 3.2(3); affected 3.1(0); affected 3.1(2); affected 1.2.1; affected 1.2.2; affected 1.2.2 SR1; affected 1.1.2; affected 1.1.0; affected 1.1.1; affected 9.0(3); affected 9.2(3); affected 9.2(1); affected 12.0.1 SR2; affected 11.1.0; affected 12.0.1 SR1; affected 11.1.0 MSR1; affected 12.0.1; affected 11.1.0 MSR2; affected 11.1.0 MSR3; affected 1.2.2 SR2; affected 11.1.0 MSR4; affected 12.0.1 SR3; affected 11.2.1; affected 12.0.1 SR4

CWE

CWE-125

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.