CVE-2022-20766

{"id": "CVE-2022-20766", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2022-20766", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-15T21:01:50.788004Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Analog Telephone Adaptor (ATA) Software", "versions": [{"status": "affected", "version": "2.16(1)"}, {"status": "affected", "version": "2.16(2)"}, {"status": "affected", "version": "2.1(6)"}, {"status": "affected", "version": "2.14"}, {"status": "affected", "version": "3.2(0)"}, {"status": "affected", "version": "1.1(4)"}, {"status": "affected", "version": "2.1(5)"}, {"status": "affected", "version": "3.2(1)"}, {"status": "affected", "version": "2.15"}, {"status": "affected", "version": "1.0(0)"}, {"status": "affected", "version": "1.34"}, {"status": "affected", "version": "3.1(1)"}, {"status": "affected", "version": "3.2(4)"}, {"status": "affected", "version": "3.0(0)"}, {"status": "affected", "version": "3.2(3)"}, {"status": "affected", "version": "3.1(0)"}, {"status": "affected", "version": "3.1(2)"}, {"status": "affected", "version": "1.2.1"}, {"status": "affected", "version": "1.2.2"}, {"status": "affected", "version": "1.2.2 SR1"}, {"status": "affected", "version": "1.1.2"}, {"status": "affected", "version": "1.1.0"}, {"status": "affected", "version": "1.1.1"}, {"status": "affected", "version": "9.0(3)"}, {"status": "affected", "version": "9.2(3)"}, {"status": "affected", "version": "9.2(1)"}, {"status": "affected", "version": "12.0.1 SR2"}, {"status": "affected", "version": "11.1.0"}, {"status": "affected", "version": "12.0.1 SR1"}, {"status": "affected", "version": "11.1.0 MSR1"}, {"status": "affected", "version": "12.0.1"}, {"status": "affected", "version": "11.1.0 MSR2"}, {"status": "affected", "version": "11.1.0 MSR3"}, {"status": "affected", "version": "1.2.2 SR2"}, {"status": "affected", "version": "11.1.0 MSR4"}, {"status": "affected", "version": "12.0.1 SR3"}, {"status": "affected", "version": "11.2.1"}, {"status": "affected", "version": "12.0.1 SR4"}], "defaultStatus": "unknown"}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "affectedData": [{"cpes": ["cpe:2.3:o:cisco:ata_190_firmware:*:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "ata_190_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}]}], "published": "2024-11-15T16:15:22.133", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs", "source": "psirt@cisco.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\nThis vulnerability is due to an out-of-bounds read when processing Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to cause a service restart.Cisco has released firmware updates that address this vulnerability. There are no workarounds that address this vulnerability."}, {"lang": "es", "value": "Una vulnerabilidad en la funcionalidad Cisco Discovery Protocol del firmware del adaptador telef\u00f3nico adaptable Cisco ATA 190 Series podr\u00eda permitir que un atacante remoto no autenticado provoque una condici\u00f3n de denegaci\u00f3n de servicio en un dispositivo afectado. Esta vulnerabilidad se debe a una lectura fuera de los l\u00edmites al procesar paquetes Cisco Discovery Protocol. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando paquetes Cisco Discovery Protocol manipulados a un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir que el atacante provoque un reinicio del servicio. Cisco ha publicado actualizaciones de firmware que solucionan esta vulnerabilidad. No existen workarounds que solucionen esta vulnerabilidad."}], "lastModified": "2026-06-17T04:25:02.857", "sourceIdentifier": "psirt@cisco.com"}