12 matches found
Cisco Analog Telephone Adapter Arbitrary Command Execution
The vulnerability in the web interface for managing microprogrammed software devices of Cisco Analog Telephone Adapter ATA series 190 exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious act...
Cisco ATA Series 190 Password Disclosure
The vulnerability in the web interface for managing microprogrammed software devices of Cisco Analog Telephone Adapter ATA series 190 involves the storage of passwords in a recoverable format. Exploiting this vulnerability allows an attacker to view the passwords of arbitrary users...
Cisco ATA 190 Cross-site Request Forgery Vulnerability
The Cisco ATA 190 is an analog phone adapter from Cisco. The Cisco ATA 190 suffers from a cross-site request forgery vulnerability that stems from a lack of CSRF protection in the web management interface of the affected device. An unauthenticated, remote attacker could use this vulnerability to...
PT-2024-7340 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter
Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Analog Telephone Adapter firmware affected versions not specified Description: The issue exists due to the lack of proper sanitization of CLI input, allowing an attacker to execute arbitrary commands as the root user by...
PT-2024-7342 · Cisco · Cisco Ata 190
Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Multiplatform Series Analog Telephone Adapter firmware affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker with high privileges to...
CVE-2022-20686
Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...
Cisco Analog Telephone Adapter Cisco Discovery Protocol DoS
The vulnerability of the Cisco Discovery Protocol implementation in microprogrammable devices of the Cisco Analog Telephone Adapter ATA series 190 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Cisco Analog Telephone Adapter DoS
The vulnerability of the web interface of the microprogramming software for Cisco Analog Telephone Adapter ATA series 190 devices is related to deficiencies in rate-limiting mechanisms when sending ICMP packets. Exploiting this vulnerability could allow a malicious actor to cause service...
CVE-2021-34710
Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perform a command injection attack resulting in remote code execution or cause a denial of service DoS condition on an affected device. For more information about these vulnerabilitie...
PT-2021-4664 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter
Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Analog Telephone Adapter Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software. These vulnerabilities could...
Cisco SPA100 Series Analog Telephone Adapters Buffer Overflow Vulnerability (CNVD-2019-36454)
The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series of analog telephone adapters from Cisco USA. A buffer overflow vulnerability exists in the Cisco SPA100 Series ATAs, which arises from a program's failure to properly validate user-submitted input, and can be exploited to...
CVE-2019-15252
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...