CVE-2022-20686

CVE-2022-20686 affects Cisco ATA 190 Series Analog Telephone Adapter firmware, specifically the LLDP functionality. The root cause is missing length validation in certain LLDP packet header fields, allowing an unauthenticated, remote attacker to execute arbitrary code on the device and cause the ...

CVE-2022-20688

The CVE-2022-20688 issue affects Cisco ATA 190 Series Analog Telephone Adapter devices and is caused by missing length validation in Cisco Discovery Protocol (CDP) header fields, enabling an unauthenticated remote attacker to execute arbitrary code and cause the CDP service to restart (DoS). Mult...

CVE-2022-20691

CVE-2022-20691 affects Cisco ATA 190 Series Adaptive Telephone Adapter firmware. The issue is a lack of length validation in the Cisco Discovery Protocol (CDP) packet headers, allowing an unauthenticated adjacent attacker to trigger a DoS by exhausting memory and causing the service to restart. M...

CVE-2022-20690

Cisco ATA 190 Series Analog Telephone Adapter firmware contains multiple vulnerabilities in the Cisco Discovery Protocol (CDP) processing due to missing length validation when handling CDP messages. An unauthenticated, adjacent attacker can send a crafted CDP packet, potentially causing memory co...

CVE-2022-20689

CVE-2022-20689 concerns multiple vulnerabilities in the Cisco Discovery Protocol (CDP) handling in Cisco ATA 190 Series Analog Telephone Adapter firmware. The root cause is missing length validation when processing CDP messages, which can allow an unauthenticated, adjacent attacker to send a craf...

CVE-2022-20687

CVE-2022-20687 affects Cisco ATA 190 Series Analog Telephone Adapter firmware, targeting the LLDP functionality. The issue arises from missing length validation of LLDP packet header fields and a buffer overflow read, allowing an unauthenticated, remote attacker to execute arbitrary code on the d...

CVE-2021-34710

The CVE pertains to the Cisco ATA 190 Series Analog Telephone Adapter Software, where multiple vulnerabilities allow command injection leading to remote code execution or a DoS on affected devices. The root cause is multiple command injection flaws in the ATA 190 firmware/software. Affected produ...

CVE-2021-34735

The CVE-2021-34735 entry concerns Cisco ATA 190 Series Analog Telephone Adapter Software. Multiple vulnerabilities could allow an attacker to perform a command injection, resulting in remote code execution or a denial of service on an affected device. The vulnerabilities affect the Cisco ATA 190 ...