CVE-2022-20691

Severity Score

6.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause a DoS condition of an affected device.
This vulnerability is due to missing length validation of certain Cisco Discovery Protocol packet header fields. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to cause the device to exhaust available memory and cause the service to restart.
Cisco has released firmware updates that address this vulnerability.

Una vulnerabilidad en la funcionalidad Cisco Discovery Protocol del firmware del adaptador telefónico adaptable Cisco ATA serie 190 podría permitir que un atacante adyacente no autenticado cause una condición DoS en un dispositivo afectado. Esta vulnerabilidad se debe a la falta de validación de longitud de ciertos campos de encabezado de paquetes de Cisco Discovery Protocol. Un atacante podría aprovechar esta vulnerabilidad enviando paquetes manipulados del Cisco Discovery Protocol a un dispositivo afectado. Un exploit exitoso podría permitir al atacante hacer que el dispositivo agote la memoria disponible y provocar que el servicio se reinicie. Cisco ha lanzado actualizaciones de firmware que abordan esta vulnerabilidad.

*Credits: N/A

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2021-11-02 CVE Reserved
2022-12-07 CVE Published
2024-06-29 EPSS Updated
2024-08-03 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-400: Uncontrolled Resource Consumption
CWE-1284: Improper Validation of Specified Quantity in Input

CAPEC

References (1)

URL	Tag	Source
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"	Ata 190 Firmware Search vendor "Cisco" for product "Ata 190 Firmware"	-	on-premises	Affected	in	Cisco Search vendor "Cisco"	Ata 190 Search vendor "Cisco" for product "Ata 190"	-	on-premises	Safe
Cisco Search vendor "Cisco"	Ata 191 Firmware Search vendor "Cisco" for product "Ata 191 Firmware"	< 11.2.2 Search vendor "Cisco" for product "Ata 191 Firmware" and version " < 11.2.2"	multiplatform	Affected	in	Cisco Search vendor "Cisco"	Ata 191 Search vendor "Cisco" for product "Ata 191"	-	multiplatform	Safe
Cisco Search vendor "Cisco"	Ata 191 Firmware Search vendor "Cisco" for product "Ata 191 Firmware"	< 12.0.1 Search vendor "Cisco" for product "Ata 191 Firmware" and version " < 12.0.1"	on-premises	Affected	in	Cisco Search vendor "Cisco"	Ata 191 Search vendor "Cisco" for product "Ata 191"	-	on-premises	Safe
Cisco Search vendor "Cisco"	Ata 191 Firmware Search vendor "Cisco" for product "Ata 191 Firmware"	12.0.1 Search vendor "Cisco" for product "Ata 191 Firmware" and version "12.0.1"	on-premises	Affected	in	Cisco Search vendor "Cisco"	Ata 191 Search vendor "Cisco" for product "Ata 191"	-	on-premises	Safe
Cisco Search vendor "Cisco"	Ata 191 Firmware Search vendor "Cisco" for product "Ata 191 Firmware"	12.0.1 Search vendor "Cisco" for product "Ata 191 Firmware" and version "12.0.1"	sr1, on-premises	Affected	in	Cisco Search vendor "Cisco"	Ata 191 Search vendor "Cisco" for product "Ata 191"	-	on-premises	Safe
Cisco Search vendor "Cisco"	Ata 191 Firmware Search vendor "Cisco" for product "Ata 191 Firmware"	12.0.1 Search vendor "Cisco" for product "Ata 191 Firmware" and version "12.0.1"	sr2, on-premises	Affected	in	Cisco Search vendor "Cisco"	Ata 191 Search vendor "Cisco" for product "Ata 191"	-	on-premises	Safe
Cisco Search vendor "Cisco"	Ata 191 Firmware Search vendor "Cisco" for product "Ata 191 Firmware"	12.0.1 Search vendor "Cisco" for product "Ata 191 Firmware" and version "12.0.1"	sr3, on-premises	Affected	in	Cisco Search vendor "Cisco"	Ata 191 Search vendor "Cisco" for product "Ata 191"	-	on-premises	Safe
Cisco Search vendor "Cisco"	Ata 191 Firmware Search vendor "Cisco" for product "Ata 191 Firmware"	12.0.1 Search vendor "Cisco" for product "Ata 191 Firmware" and version "12.0.1"	sr4, on-premises	Affected	in	Cisco Search vendor "Cisco"	Ata 191 Search vendor "Cisco" for product "Ata 191"	-	on-premises	Safe
Cisco Search vendor "Cisco"	Ata 192 Firmware Search vendor "Cisco" for product "Ata 192 Firmware"	< 11.2.2 Search vendor "Cisco" for product "Ata 192 Firmware" and version " < 11.2.2"	multiplatform	Affected	in	Cisco Search vendor "Cisco"	Ata 192 Search vendor "Cisco" for product "Ata 192"	-	multiplatform	Safe