Memory Corruption in Cisco ATA 190 Series Analog Telephone Adapter

CVE-2022-20690

Summary

Multiple vulnerabilities have been identified in the Cisco Discovery Protocol aspect of the Cisco ATA 190 Series Analog Telephone Adapter firmware. These flaws arise from insufficient length validation when processing Cisco Discovery Protocol messages. An unauthenticated attacker adjacent to the affected device can exploit these vulnerabilities by sending specially crafted malicious packets. This exploitation can lead to an out-of-bounds read, which in turn may corrupt the internal Cisco Discovery Protocol database, potentially compromising the integrity of the device’s functionality.

References