What is CVE-2022-20687?

CVE-2022-20687 is a medium-severity vulnerability in Cisco Ata_190, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 5.3/10. Published 2022-12-12.

How severe is CVE-2022-20687?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Buffer overflow in Cisco Ata_190

CVE-2022-20687

Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device an…

Vulnerability class: Buffer Overflow

EPSS: 0.009 (56.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Cisco Ata_190
Cisco Ata_190_firmware
Cisco Ata_191
Cisco Ata_191_firmware — versions 12.0.1
Cisco Ata_192
Cisco Ata_192_firmware
Cisco Analog Telephone Adaptor (Ata) Software — versions 1.2.1, 1.2.2 SR1, 1.2.2

Weakness classification (CWE)

References

psirt@cisco.com

Frequently asked questions

What is CVE-2022-20687?: CVE-2022-20687 is a medium-severity vulnerability in Cisco Ata_190, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 5.3/10. Published 2022-12-12.
How severe is CVE-2022-20687?: Medium severity. CVSS v3 base score is 5.3 out of 10.