CVE-2022-20688: Medium severity cisco ata 190 firmware vulnerability
A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause Cisco Discovery Protocol service to restart. This vulnerability is due to missing length validation of certain Cisco Discovery Protocol packet header fields. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to execute code on the affected device and cause Cisco Discovery Protocol to restart unexpectedly, resulting in a DoS condition.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-20688 vulnerability?
CVE-2022-20688 is a vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware that could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the Cisco Discovery Protocol service to restart.
How severe is CVE-2022-20688 vulnerability?
CVE-2022-20688 vulnerability has a severity rating of 5.3, which is considered medium.
Which software is affected by CVE-2022-20688 vulnerability?
The Cisco ATA 190 Series Analog Telephone Adapter firmware versions are affected by CVE-2022-20688 vulnerability.
How can an attacker exploit CVE-2022-20688 vulnerability?
An unauthenticated, remote attacker can exploit CVE-2022-20688 vulnerability by executing arbitrary code on an affected device and causing the Cisco Discovery Protocol service to restart.
Is there a fix available for CVE-2022-20688 vulnerability?
Yes, Cisco has released firmware updates to address the CVE-2022-20688 vulnerability. It is recommended to upgrade to the latest firmware version provided by Cisco.