CVE-2022-20688

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-20688", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "requesterUserId": "4087f8c1-b21c-479b-99df-de23cb76b743", "dateReserved": "2021-11-02T13:28:29.056Z", "datePublished": "2022-12-07T16:54:29.260Z", "dateUpdated": "2024-08-03T02:17:53.195Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-01-25T16:57:05.437Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause Cisco Discovery Protocol service to restart.\r\n This vulnerability is due to missing length validation of certain Cisco Discovery Protocol packet header fields. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to execute code on the affected device and cause Cisco Discovery Protocol to restart unexpectedly, resulting in a DoS condition."}], "affected": [{"vendor": "Cisco", "product": "Cisco Analog Telephone Adaptor (ATA) Software", "versions": [{"version": "1.2.1", "status": "affected"}, {"version": "1.2.2 SR1", "status": "affected"}, {"version": "1.2.2", "status": "affected"}, {"version": "1.2.2 SR2", "status": "affected"}, {"version": "11.1.0 MSR4", "status": "affected"}, {"version": "11.1.0", "status": "affected"}, {"version": "11.1.0 MSR1", "status": "affected"}, {"version": "11.1.0 MSR2", "status": "affected"}, {"version": "11.1.0 MSR3", "status": "affected"}, {"version": "1.1.0", "status": "affected"}, {"version": "1.1.1", "status": "affected"}, {"version": "1.1.2", "status": "affected"}, {"version": "12.0.1 SR2", "status": "affected"}, {"version": "12.0.1", "status": "affected"}, {"version": "12.0.1 SR1", "status": "affected"}, {"version": "12.0.1 SR3", "status": "affected"}, {"version": "12.0.1 SR4", "status": "affected"}, {"version": "11.2.1", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Out-of-bounds Read", "type": "cwe", "cweId": "CWE-125"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs", "name": "cisco-sa-ata19x-multivuln-GEZYVvs"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW"}}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-ata19x-multivuln-GEZYVvs", "discovery": "EXTERNAL", "defects": ["CSCvz93493", "CSCvz91984", "CSCvz93504"]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T02:17:53.195Z"}, "title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs", "name": "cisco-sa-ata19x-multivuln-GEZYVvs", "tags": ["x_transferred"]}]}]}}

{}

{"affected": [{"affectedData": [{"product": "Cisco Analog Telephone Adaptor (ATA) Software", "vendor": "Cisco", "versions": [{"status": "affected", "version": "1.2.1"}, {"status": "affected", "version": "1.2.2 SR1"}, {"status": "affected", "version": "1.2.2"}, {"status": "affected", "version": "1.2.2 SR2"}, {"status": "affected", "version": "11.1.0 MSR4"}, {"status": "affected", "version": "11.1.0"}, {"status": "affected", "version": "11.1.0 MSR1"}, {"status": "affected", "version": "11.1.0 MSR2"}, {"status": "affected", "version": "11.1.0 MSR3"}, {"status": "affected", "version": "1.1.0"}, {"status": "affected", "version": "1.1.1"}, {"status": "affected", "version": "1.1.2"}, {"status": "affected", "version": "12.0.1 SR2"}, {"status": "affected", "version": "12.0.1"}, {"status": "affected", "version": "12.0.1 SR1"}, {"status": "affected", "version": "12.0.1 SR3"}, {"status": "affected", "version": "12.0.1 SR4"}, {"status": "affected", "version": "11.2.1"}]}], "source": "psirt@cisco.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ata_190_firmware:-:*:*:*:on-premises:*:*:*", "matchCriteriaId": "7C1E5802-B5A8-48F5-AF02-870554BF0BCC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:ata_190:-:*:*:*:on-premises:*:*:*", "matchCriteriaId": "B00EB763-2920-4747-AE04-8FAAE428EE29", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ata_191_firmware:*:*:*:*:multiplatform:*:*:*", "matchCriteriaId": "B5C05391-0B7A-4AC2-A037-1D107D717DD8", "versionEndExcluding": "11.2.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:ata_191:-:*:*:*:multiplatform:*:*:*", "matchCriteriaId": "B0C232BB-005C-4E04-9B99-2B01AC8E8BA1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ata_191_firmware:*:*:*:*:on-premises:*:*:*", "matchCriteriaId": "CE8FF053-1B43-40D3-842D-DB064B6F900D", "versionEndExcluding": "12.0.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ata_191_firmware:12.0.1:-:*:*:on-premises:*:*:*", "matchCriteriaId": "D96B3081-82E5-4738-87A1-39AF0A5ADA04", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ata_191_firmware:12.0.1:sr1:*:*:on-premises:*:*:*", "matchCriteriaId": "4278AC83-3047-4D88-9D4A-028A8158A395", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ata_191_firmware:12.0.1:sr2:*:*:on-premises:*:*:*", "matchCriteriaId": "58092E9D-36D8-4C24-B3BB-DDF2DCA34096", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ata_191_firmware:12.0.1:sr3:*:*:on-premises:*:*:*", "matchCriteriaId": "AC2E80D5-420A-4D30-9632-C30DC54291A2", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ata_191_firmware:12.0.1:sr4:*:*:on-premises:*:*:*", "matchCriteriaId": "8D58C3C4-577B-40CC-B836-3BE85674B5E6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:ata_191:-:*:*:*:on-premises:*:*:*", "matchCriteriaId": "2BBB1A29-ABF8-4F79-A436-A416FAF4E7A9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ata_192_firmware:*:*:*:*:multiplatform:*:*:*", "matchCriteriaId": "E066155E-8D37-4355-BA0A-A3FE18FBDCCC", "versionEndExcluding": "11.2.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:ata_192:-:*:*:*:multiplatform:*:*:*", "matchCriteriaId": "00A3390F-594D-4DB2-96EC-04D0D73C9421", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause Cisco Discovery Protocol service to restart.\r\n This vulnerability is due to missing length validation of certain Cisco Discovery Protocol packet header fields. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to execute code on the affected device and cause Cisco Discovery Protocol to restart unexpectedly, resulting in a DoS condition."}, {"lang": "es", "value": "Una vulnerabilidad en la funcionalidad Cisco Discovery Protocol del firmware del adaptador de tel\u00e9fono anal\u00f3gico Cisco ATA serie 190 podr\u00eda permitir que un atacante remoto no autenticado ejecute c\u00f3digo arbitrario en un dispositivo afectado y provocar que el servicio Cisco Discovery Protocol se reinicie. Esta vulnerabilidad se debe a la falta de validaci\u00f3n de longitud de ciertos campos de encabezado de paquetes de Cisco Discovery Protocol. Un atacante podr\u00eda aprovechar estas vulnerabilidades enviando un paquete malicioso del Protocolo de descubrimiento de Cisco a un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante ejecutar c\u00f3digo en el dispositivo afectado y provocar que Cisco Discovery Protocol se reinicie inesperadamente, lo que resultar\u00eda en una condici\u00f3n DoS."}], "id": "CVE-2022-20688", "lastModified": "2026-06-17T04:24:51.807", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "psirt@cisco.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-12-12T09:15:12.347", "references": [{"source": "psirt@cisco.com", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "psirt@cisco.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-1284"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}