{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-20766", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2021-11-02T13:28:29.102Z", "datePublished": "2024-11-15T15:35:42.433Z", "dateUpdated": "2024-11-15T21:07:11.500Z"}, "containers": {"cna": {"title": "Cisco ATA 190 Series Analog Telephone Adapter firmware Cisco Discovery Protocol Denial of Service Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\nThis vulnerability is due to an out-of-bounds read when processing Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to cause a service restart.Cisco has released firmware updates that address this vulnerability. There are no workarounds that address this vulnerability."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs", "name": "cisco-sa-ata19x-multivuln-GEZYVvs"}], "exploits": [{"lang": "en", "value": "The Cisco\u00a0PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-ata19x-multivuln-GEZYVvs", "discovery": "EXTERNAL", "defects": ["CSCwa24849"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Out-of-bounds Read", "type": "cwe", "cweId": "CWE-125"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Analog Telephone Adaptor (ATA) Software", "versions": [{"version": "2.16(1)", "status": "affected"}, {"version": "2.16(2)", "status": "affected"}, {"version": "2.1(6)", "status": "affected"}, {"version": "2.14", "status": "affected"}, {"version": "3.2(0)", "status": "affected"}, {"version": "1.1(4)", "status": "affected"}, {"version": "2.1(5)", "status": "affected"}, {"version": "3.2(1)", "status": "affected"}, {"version": "2.15", "status": "affected"}, {"version": "1.0(0)", "status": "affected"}, {"version": "1.34", "status": "affected"}, {"version": "3.1(1)", "status": "affected"}, {"version": "3.2(4)", "status": "affected"}, {"version": "3.0(0)", "status": "affected"}, {"version": "3.2(3)", "status": "affected"}, {"version": "3.1(0)", "status": "affected"}, {"version": "3.1(2)", "status": "affected"}, {"version": "1.2.1", "status": "affected"}, {"version": "1.2.2", "status": "affected"}, {"version": "1.2.2 SR1", "status": "affected"}, {"version": "1.1.2", "status": "affected"}, {"version": "1.1.0", "status": "affected"}, {"version": "1.1.1", "status": "affected"}, {"version": "9.0(3)", "status": "affected"}, {"version": "9.2(3)", "status": "affected"}, {"version": "9.2(1)", "status": "affected"}, {"version": "12.0.1 SR2", "status": "affected"}, {"version": "11.1.0", "status": "affected"}, {"version": "12.0.1 SR1", "status": "affected"}, {"version": "11.1.0 MSR1", "status": "affected"}, {"version": "12.0.1", "status": "affected"}, {"version": "11.1.0 MSR2", "status": "affected"}, {"version": "11.1.0 MSR3", "status": "affected"}, {"version": "1.2.2 SR2", "status": "affected"}, {"version": "11.1.0 MSR4", "status": "affected"}, {"version": "12.0.1 SR3", "status": "affected"}, {"version": "11.2.1", "status": "affected"}, {"version": "12.0.1 SR4", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-11-15T15:35:42.433Z"}}, "adp": [{"affected": [{"vendor": "cisco", "product": "ata_190_firmware", "cpes": ["cpe:2.3:o:cisco:ata_190_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "*", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-15T21:01:50.788004Z", "id": "CVE-2022-20766", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-15T21:07:11.500Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-20766", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-15T21:01:50.788004Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:cisco:ata_190_firmware:*:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "ata_190_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-15T21:06:55.388Z"}}], "cna": {"title": "Cisco ATA 190 Series Analog Telephone Adapter firmware Cisco Discovery Protocol Denial of Service Vulnerability", "source": {"defects": ["CSCwa24849"], "advisory": "cisco-sa-ata19x-multivuln-GEZYVvs", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Analog Telephone Adaptor (ATA) Software", "versions": [{"status": "affected", "version": "2.16(1)"}, {"status": "affected", "version": "2.16(2)"}, {"status": "affected", "version": "2.1(6)"}, {"status": "affected", "version": "2.14"}, {"status": "affected", "version": "3.2(0)"}, {"status": "affected", "version": "1.1(4)"}, {"status": "affected", "version": "2.1(5)"}, {"status": "affected", "version": "3.2(1)"}, {"status": "affected", "version": "2.15"}, {"status": "affected", "version": "1.0(0)"}, {"status": "affected", "version": "1.34"}, {"status": "affected", "version": "3.1(1)"}, {"status": "affected", "version": "3.2(4)"}, {"status": "affected", "version": "3.0(0)"}, {"status": "affected", "version": "3.2(3)"}, {"status": "affected", "version": "3.1(0)"}, {"status": "affected", "version": "3.1(2)"}, {"status": "affected", "version": "1.2.1"}, {"status": "affected", "version": "1.2.2"}, {"status": "affected", "version": "1.2.2 SR1"}, {"status": "affected", "version": "1.1.2"}, {"status": "affected", "version": "1.1.0"}, {"status": "affected", "version": "1.1.1"}, {"status": "affected", "version": "9.0(3)"}, {"status": "affected", "version": "9.2(3)"}, {"status": "affected", "version": "9.2(1)"}, {"status": "affected", "version": "12.0.1 SR2"}, {"status": "affected", "version": "11.1.0"}, {"status": "affected", "version": "12.0.1 SR1"}, {"status": "affected", "version": "11.1.0 MSR1"}, {"status": "affected", "version": "12.0.1"}, {"status": "affected", "version": "11.1.0 MSR2"}, {"status": "affected", "version": "11.1.0 MSR3"}, {"status": "affected", "version": "1.2.2 SR2"}, {"status": "affected", "version": "11.1.0 MSR4"}, {"status": "affected", "version": "12.0.1 SR3"}, {"status": "affected", "version": "11.2.1"}, {"status": "affected", "version": "12.0.1 SR4"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco\u00a0PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs", "name": "cisco-sa-ata19x-multivuln-GEZYVvs"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\nThis vulnerability is due to an out-of-bounds read when processing Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to cause a service restart.Cisco has released firmware updates that address this vulnerability. There are no workarounds that address this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-125", "description": "Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-11-15T15:35:42.433Z"}}}, "cveMetadata": {"cveId": "CVE-2022-20766", "state": "PUBLISHED", "dateUpdated": "2024-11-15T21:07:11.500Z", "dateReserved": "2021-11-02T13:28:29.102Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2024-11-15T15:35:42.433Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\nThis vulnerability is due to an out-of-bounds read when processing Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to cause a service restart.Cisco has released firmware updates that address this vulnerability. There are no workarounds that address this vulnerability."}, {"lang": "es", "value": "Una vulnerabilidad en la funcionalidad Cisco Discovery Protocol del firmware del adaptador telef\u00f3nico adaptable Cisco ATA 190 Series podr\u00eda permitir que un atacante remoto no autenticado provoque una condici\u00f3n de denegaci\u00f3n de servicio en un dispositivo afectado. Esta vulnerabilidad se debe a una lectura fuera de los l\u00edmites al procesar paquetes Cisco Discovery Protocol. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando paquetes Cisco Discovery Protocol manipulados a un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir que el atacante provoque un reinicio del servicio. Cisco ha publicado actualizaciones de firmware que solucionan esta vulnerabilidad. No existen workarounds que solucionen esta vulnerabilidad."}], "id": "CVE-2022-20766", "lastModified": "2024-11-18T17:11:56.587", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "ykramarz@cisco.com", "type": "Primary"}]}, "published": "2024-11-15T16:15:22.133", "references": [{"source": "ykramarz@cisco.com", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs"}], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "ykramarz@cisco.com", "type": "Primary"}]}

{}