Out-of-bounds Read in Cisco Ata_190
CVE-2022-20688
A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause Cisco Discove…
Vulnerability class: Buffer Overflow
EPSS: 0.009 (56.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Cisco Ata_190
- Cisco Ata_190_firmware
- Cisco Ata_191
- Cisco Ata_191_firmware — versions 12.0.1
- Cisco Ata_192
- Cisco Ata_192_firmware
- Cisco Analog Telephone Adaptor (Ata) Software — versions 1.2.1, 1.2.2 SR1, 1.2.2
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2022-20688?
- CVE-2022-20688 is a medium-severity vulnerability in Cisco Ata_190, classified under Out-of-bounds Read. CVSS score: 5.3/10. Published 2022-12-12.
- How severe is CVE-2022-20688?
- Medium severity. CVSS v3 base score is 5.3 out of 10.