CVE-2022-20689— Cisco ATA 190 输入验证错误漏洞

N/A

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing length validation checks when processing Cisco Discovery Protocol messages. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to cause an out-of-bounds read of the valid Cisco Discovery Protocol packet data, which could allow the attacker to cause corruption in the internal Cisco Discovery Protocol database of the affected device.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

长度参数不一致性处理不恰当

Cisco ATA 190 输入验证错误漏洞

Cisco ATA 190是美国思科（Cisco）公司的一个模拟电话适配器。 Cisco ATA 190 Series 存在安全漏洞，该漏洞源于 Cisco 发现协议和链路层发现协议 (LLDP) 中存在多个漏洞。这些漏洞可能允许攻击者执行代码、导致服务意外重新加载或导致 Cisco 发现协议或 LLDP 数据库损坏受影响的设备。

N/A

N/A