Lucene search

[email protected]CVE-2022-20691

HistoryDec 12, 2022 - 9:15 a.m.

CVE-2022-20691

2022-12-1209:15:12

CWE-400

CWE-1284

[email protected]

web.nvd.nist.gov

192

cisco

ata 190 series

vulnerability

cisco discovery protocol

firmware

dos

adjacent attacker

nvd

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.0%

JSON

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause a DoS condition of an affected device.
This vulnerability is due to missing length validation of certain Cisco Discovery Protocol packet header fields. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to cause the device to exhaust available memory and cause the service to restart.
Cisco has released firmware updates that address this vulnerability.

Affected configurations

NVD

Node

ciscoata_190_firmwareMatch-on-premises

AND

ciscoata_190Match-on-premises

Node

ciscoata_191_firmwareRange<11.2.2multiplatform

AND

ciscoata_191Match-multiplatform

Node

ciscoata_191_firmwareRange<12.0.1on-premises

ciscoata_191_firmwareMatch12.0.1-on-premises

ciscoata_191_firmwareMatch12.0.1sr1on-premises

ciscoata_191_firmwareMatch12.0.1sr2on-premises

ciscoata_191_firmwareMatch12.0.1sr3on-premises

ciscoata_191_firmwareMatch12.0.1sr4on-premises

AND

ciscoata_191Match-on-premises

Node

ciscoata_192_firmwareRange<11.2.2multiplatform

AND

ciscoata_192Match-multiplatform

CPENameOperatorVersion
cisco:ata_190_firmwarecisco ata 190 firmwareeq-

CPE	Name	Operator	Version
cisco:ata_190_firmware	cisco ata 190 firmware	eq	-

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco Analog Telephone Adaptor (ATA) Software",
    "versions": [
      {
        "version": "1.2.1",
        "status": "affected"
      },
      {
        "version": "1.2.2 SR1",
        "status": "affected"
      },
      {
        "version": "1.2.2",
        "status": "affected"
      },
      {
        "version": "1.2.2 SR2",
        "status": "affected"
      },
      {
        "version": "11.1.0 MSR4",
        "status": "affected"
      },
      {
        "version": "11.1.0",
        "status": "affected"
      },
      {
        "version": "11.1.0 MSR1",
        "status": "affected"
      },
      {
        "version": "11.1.0 MSR2",
        "status": "affected"
      },
      {
        "version": "11.1.0 MSR3",
        "status": "affected"
      },
      {
        "version": "1.1.0",
        "status": "affected"
      },
      {
        "version": "1.1.1",
        "status": "affected"
      },
      {
        "version": "1.1(4)",
        "status": "affected"
      },
      {
        "version": "1.1.2",
        "status": "affected"
      },
      {
        "version": "2.1(6)",
        "status": "affected"
      },
      {
        "version": "2.1(5)",
        "status": "affected"
      },
      {
        "version": "2.16(2)",
        "status": "affected"
      },
      {
        "version": "2.16(1)",
        "status": "affected"
      },
      {
        "version": "3.2(0)",
        "status": "affected"
      },
      {
        "version": "3.2(4)",
        "status": "affected"
      },
      {
        "version": "3.2(3)",
        "status": "affected"
      },
      {
        "version": "3.2(1)",
        "status": "affected"
      },
      {
        "version": "2.15",
        "status": "affected"
      },
      {
        "version": "2.14",
        "status": "affected"
      },
      {
        "version": "1.34",
        "status": "affected"
      },
      {
        "version": "1.0(0)",
        "status": "affected"
      },
      {
        "version": "3.1(1)",
        "status": "affected"
      },
      {
        "version": "3.1(0)",
        "status": "affected"
      },
      {
        "version": "3.1(2)",
        "status": "affected"
      },
      {
        "version": "3.0(0)",
        "status": "affected"
      },
      {
        "version": "9.2(3)",
        "status": "affected"
      },
      {
        "version": "9.2(1)",
        "status": "affected"
      },
      {
        "version": "9.0(3)",
        "status": "affected"
      },
      {
        "version": "12.0.1 SR2",
        "status": "affected"
      },
      {
        "version": "12.0.1",
        "status": "affected"
      },
      {
        "version": "12.0.1 SR1",
        "status": "affected"
      },
      {
        "version": "12.0.1 SR3",
        "status": "affected"
      },
      {
        "version": "12.0.1 SR4",
        "status": "affected"
      },
      {
        "version": "11.2.1",
        "status": "affected"
      }
    ]
  }
]

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs

Social References

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.0%

JSON

Related for CVE-2022-20691

prion1 nvd1 cvelist1 cisco1