What is CVE-2022-20690?

CVE-2022-20690 is a medium-severity vulnerability in Cisco Ata_190, classified under Improper Handling of Length Parameter Inconsistency. CVSS score: 5.3/10. Published 2022-12-12.

How severe is CVE-2022-20690?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Cisco Ata_190

CVE-2022-20690

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an af…

EPSS: 0.007 (49.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Cisco Ata_190
Cisco Ata_190_firmware
Cisco Ata_191
Cisco Ata_191_firmware — versions 12.0.1
Cisco Ata_192
Cisco Ata_192_firmware
Cisco Analog Telephone Adaptor (Ata) Software — versions 1.2.1, 1.2.2 SR1, 1.2.2

Weakness classification (CWE)

References

psirt@cisco.com

Frequently asked questions

What is CVE-2022-20690?: CVE-2022-20690 is a medium-severity vulnerability in Cisco Ata_190, classified under Improper Handling of Length Parameter Inconsistency. CVSS score: 5.3/10. Published 2022-12-12.
How severe is CVE-2022-20690?: Medium severity. CVSS v3 base score is 5.3 out of 10.