{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-21T02:41:14.757","vulnerabilities":[{"cve":{"id":"CVE-2022-20688","sourceIdentifier":"psirt@cisco.com","published":"2022-12-12T09:15:12.347","lastModified":"2024-11-21T06:43:19.557","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause Cisco Discovery Protocol service to restart.\r\n This vulnerability is due to missing length validation of certain Cisco Discovery Protocol packet header fields. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to execute code on the affected device and cause Cisco Discovery Protocol to restart unexpectedly, resulting in a DoS condition."},{"lang":"es","value":"Una vulnerabilidad en la funcionalidad Cisco Discovery Protocol del firmware del adaptador de teléfono analógico Cisco ATA serie 190 podría permitir que un atacante remoto no autenticado ejecute código arbitrario en un dispositivo afectado y provocar que el servicio Cisco Discovery Protocol se reinicie. Esta vulnerabilidad se debe a la falta de validación de longitud de ciertos campos de encabezado de paquetes de Cisco Discovery Protocol. Un atacante podría aprovechar estas vulnerabilidades enviando un paquete malicioso del Protocolo de descubrimiento de Cisco a un dispositivo afectado. Un exploit exitoso podría permitir al atacante ejecutar código en el dispositivo afectado y provocar que Cisco Discovery Protocol se reinicie inesperadamente, lo que resultaría en una condición DoS."}],"metrics":{"cvssMetricV31":[{"source":"psirt@cisco.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}]},"weaknesses":[{"source":"psirt@cisco.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-1284"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ata_190_firmware:-:*:*:*:on-premises:*:*:*","matchCriteriaId":"7C1E5802-B5A8-48F5-AF02-870554BF0BCC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ata_190:-:*:*:*:on-premises:*:*:*","matchCriteriaId":"B00EB763-2920-4747-AE04-8FAAE428EE29"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ata_191_firmware:*:*:*:*:multiplatform:*:*:*","versionEndExcluding":"11.2.2","matchCriteriaId":"B5C05391-0B7A-4AC2-A037-1D107D717DD8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ata_191:-:*:*:*:multiplatform:*:*:*","matchCriteriaId":"B0C232BB-005C-4E04-9B99-2B01AC8E8BA1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ata_191_firmware:*:*:*:*:on-premises:*:*:*","versionEndExcluding":"12.0.1","matchCriteriaId":"CE8FF053-1B43-40D3-842D-DB064B6F900D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ata_191_firmware:12.0.1:-:*:*:on-premises:*:*:*","matchCriteriaId":"D96B3081-82E5-4738-87A1-39AF0A5ADA04"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ata_191_firmware:12.0.1:sr1:*:*:on-premises:*:*:*","matchCriteriaId":"4278AC83-3047-4D88-9D4A-028A8158A395"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ata_191_firmware:12.0.1:sr2:*:*:on-premises:*:*:*","matchCriteriaId":"58092E9D-36D8-4C24-B3BB-DDF2DCA34096"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ata_191_firmware:12.0.1:sr3:*:*:on-premises:*:*:*","matchCriteriaId":"AC2E80D5-420A-4D30-9632-C30DC54291A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ata_191_firmware:12.0.1:sr4:*:*:on-premises:*:*:*","matchCriteriaId":"8D58C3C4-577B-40CC-B836-3BE85674B5E6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ata_191:-:*:*:*:on-premises:*:*:*","matchCriteriaId":"2BBB1A29-ABF8-4F79-A436-A416FAF4E7A9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ata_192_firmware:*:*:*:*:multiplatform:*:*:*","versionEndExcluding":"11.2.2","matchCriteriaId":"E066155E-8D37-4355-BA0A-A3FE18FBDCCC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ata_192:-:*:*:*:multiplatform:*:*:*","matchCriteriaId":"00A3390F-594D-4DB2-96EC-04D0D73C9421"}]}]}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs","source":"psirt@cisco.com"},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}