CVE-2013-1111: Critical severity cisco ata 187 analog telephone adaptor vulnerability
The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implement access control, which allows remote attackers to execute operating-system commands via vectors involving a session on TCP port 7870, aka Bug ID CSCtz67038.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1111?
CVE-2013-1111 has a medium severity level due to improper access control allowing remote command execution.
How do I fix CVE-2013-1111?
To fix CVE-2013-1111, upgrade the Cisco ATA 187 firmware to versions 9.2.1.0 ES build 4 or later, or 9.2.3.1 ES build 4 or later.
What systems are affected by CVE-2013-1111?
CVE-2013-1111 affects Cisco ATA 187 Analog Telephone Adaptor devices running firmware versions 9.2.1.0 or 9.2.3.1.
What type of vulnerability is CVE-2013-1111?
CVE-2013-1111 is classified as a command injection vulnerability due to inadequate access controls.
Can CVE-2013-1111 be exploited remotely?
Yes, CVE-2013-1111 can be exploited remotely via TCP port 7870.