CVE-2022-20686

Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...

CVE-2022-20686

CVE-2022-20686 affects Cisco ATA 190 Series Analog Telephone Adapter firmware, specifically the LLDP functionality. The root cause is missing length validation in certain LLDP packet header fields, allowing an unauthenticated, remote attacker to execute arbitrary code on the device and cause the ...

CVE-2022-20691: Uncontrolled Resource Consumption

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause a DoS condition of an affected device. This vulnerability is due to missing length validation of certain Cisco...

CVE-2022-20688: Out-of-bounds Read

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause Cisco Discovery Protocol service to restart. This vulnerability is due ...

CVE-2022-20686: Improper Handling of Length Parameter Inconsistency

Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...

CVE-2022-20687: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...

CVE-2022-20689: Improper Handling of Length Parameter Inconsistency

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

CVE-2022-20690: Improper Handling of Length Parameter Inconsistency

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

GSD-2022-1007364 ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS

ata: ahci: Match EMMAXSLOTS with SATAPMPMAXPORTS This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.221 by commit...

PT-2022-38070

Уязвимость функции ata tport add модуля drivers/ata/libata-transport.c драйвера SATA/PATA ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информа...

PT-2025-37617

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-25-generic 25-Ubuntu Description An array-index-out-of-bounds issue was identified in the Linux kernel's AHCI driver. The sata pmp init links function initializes link-pmp up to SATA PMP MAX PORTS, while t...

Cisco ATA 190 LLDP Packet Input Validation Error Vulnerability

The Cisco ATA 190 is an analog phone adapter from Cisco, U.S.A. An input validation error vulnerability exists in the Cisco ATA 190 Series, which stems from a lack of length validation in certain LLDP packet header fields. An unauthenticated, remote attacker could exploit the vulnerability to...

Cisco ATA 190 Series Protocol Packet Input Validation Error Vulnerability

The ATA 190, ATA 191, and ATA 192 is a Cisco ATA 190 series analog phone adapter. An input validation error vulnerability exists in the Cisco ATA 190 local deployment only, ATA 191 local deployment or multi-platform deployment, and ATA 192 multi-platform deployment only, which stems from a securi...

Cisco ATA 190 Series Protocol Message Input Validation Error Vulnerability

ATA 190, ATA 191, ATA 192 is a Cisco ATA 190 Series analog phone adapter.An input validation error vulnerability exists in the Cisco ATA 190 Series, which stems from a lack of length validation checks when processing Cisco Discovery Protocol messages, and can be exploited by an unauthenticated,...

Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities

Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP for Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to execute code, cause the service to reload unexpectedly, or cause Cisco Discovery Protocol or LLDP database corrupti...

Cisco ATA 190 代码注入漏洞

The Cisco ATA 190 is an analog phone adapter from Cisco. The Cisco ATA 190 Series has a code injection vulnerability that stems from multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP. These vulnerabilities could allow an attacker to execute code, caus...

Cisco ATA 190 输入验证错误漏洞

The Cisco ATA 190 is an analog phone adapter from Cisco. The Cisco ATA 190 Series has an input validation error vulnerability that stems from multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP. These vulnerabilities could allow an attacker to execute...

Cisco ATA 190 缓冲区错误漏洞

The Cisco ATA 190 is an analog telephone adapter from Cisco. The Cisco ATA 190 Series has a buffer error vulnerability that stems from multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP. These vulnerabilities could allow an attacker to execute code,...

PT-2022-6064 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Analog Telephone Adapter affected versions not specified Description: The issue is related to the implementation of the Link Layer Discovery Protocol LLDP functionality in the firmware of Cisco Analog Telephone Adapter AT...

PT-2022-5300 · Cisco · Cisco Ata 190 Series Adaptive Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Adaptive Telephone Adapter firmware affected versions not specified Description: A vulnerability in the Cisco Discovery Protocol functionality could allow an unauthenticated, remote attacker to cause a Denial of Service D...