Lucene search

K
CiscoAta 191 Firmware

16 matches found

CVE
CVE
added 2022/12/12 9:15 a.m.223 views

CVE-2022-20686

Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart.These vulnerabilities ar...

5.3CVSS6.1AI score0.00101EPSS
CVE
CVE
added 2022/12/12 9:15 a.m.223 views

CVE-2022-20688

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause Cisco Discovery Protocol service to restart.This vulnerability is due to ...

5.3CVSS6AI score0.00054EPSS
CVE
CVE
added 2022/12/12 9:15 a.m.214 views

CVE-2022-20689

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device.These vulnerabilities are due to missing lengt...

8.8CVSS8.7AI score0.00055EPSS
CVE
CVE
added 2022/12/12 9:15 a.m.210 views

CVE-2022-20691

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause a DoS condition of an affected device.This vulnerability is due to missing length validation of certain Cisco Discover...

6.5CVSS6.4AI score0.0005EPSS
CVE
CVE
added 2022/12/12 9:15 a.m.209 views

CVE-2022-20690

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device.These vulnerabilities are due to missing lengt...

8.8CVSS8.8AI score0.00046EPSS
CVE
CVE
added 2022/12/12 9:15 a.m.204 views

CVE-2022-20687

Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart.These vulnerabilities ar...

5.3CVSS6.1AI score0.00075EPSS
CVE
CVE
added 2024/10/16 5:15 p.m.47 views

CVE-2024-20459

A vulnerability in the web-based management interface of Cisco ATA 190 Multiplatform Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with high privileges to execute arbitrary commands as the root user on the underlying operating system. This vulnerability is d...

7.2CVSS7AI score0.00198EPSS
CVE
CVE
added 2024/10/16 5:15 p.m.46 views

CVE-2024-20458

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to view or delete the configuration or change the firmware on an affected device. This vulnerability is due to a lack of authentication on ...

8.2CVSS8.3AI score0.0035EPSS
CVE
CVE
added 2024/10/16 5:15 p.m.43 views

CVE-2024-20420

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with low privileges to run commands as an Admin user. This vulnerability is due to incorrect authorization verification by the HTTP server. A...

8.8CVSS6AI score0.00117EPSS
CVE
CVE
added 2024/10/16 5:15 p.m.43 views

CVE-2024-20463

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to modify the configuration or reboot an affected device. This vulnerability is due to the HTTP server allowing state changes in GET reques...

7.1CVSS5.8AI score0.00106EPSS
CVE
CVE
added 2024/10/16 5:15 p.m.39 views

CVE-2024-20421

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. This vulnerability is due to ins...

7.1CVSS6.9AI score0.00066EPSS
CVE
CVE
added 2021/10/06 8:15 p.m.38 views

CVE-2021-34710

Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perform a command injection attack resulting in remote code execution or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilitie...

9CVSS9.3AI score0.0569EPSS
CVE
CVE
added 2024/10/16 5:15 p.m.36 views

CVE-2024-20461

A vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, local attacker with high privileges to execute arbitrary commands as the root user. This vulnerability exists because CLI input is not properly sanitized. An attacker could exploit thi...

6CVSS6.2AI score0.00084EPSS
CVE
CVE
added 2024/10/16 5:15 p.m.36 views

CVE-2024-20462

A vulnerability in the web-based management interface of Cisco ATA 190 Series Multiplatform Analog Telephone Adapter firmware could allow an authenticated, local attacker with low privileges to view passwords on an affected device. This vulnerability is due to incorrect sanitization of HTML content...

5.5CVSS5.2AI score0.00032EPSS
CVE
CVE
added 2021/10/06 8:15 p.m.35 views

CVE-2021-34735

Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perform a command injection attack resulting in remote code execution or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilitie...

8.8CVSS8.6AI score0.01508EPSS
CVE
CVE
added 2024/10/16 5:15 p.m.32 views

CVE-2024-20460

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user. This vulnerability is due to insufficient validation of user input...

6.1CVSS6AI score0.00045EPSS