Description
A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.
This vulnerability is due to an out-of-bounds read when processing Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to cause a service restart.Cisco has released firmware updates that address this vulnerability. There are no workarounds that address this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco Analog Telephone Adaptor (ATA) Software | 2.16(1), 2.16(2), 2.1(6), 2.14, 3.2(0), 1.1(4), 2.1(5), 3.2(1), 2.15, 1.0(0), 1.34, 3.1(1), 3.2(4), 3.0(0), 3.2(3), 3.1(0), 3.1(2), 1.2.1, 1.2.2, 1.2.2 SR1, 1.1.2, 1.1.0, 1.1.1, 9.0(3), 9.2(3), 9.2(1), 12.0.1 SR2, 11.1.0, 12.0.1 SR1, 11.1.0 MSR1, 12.0.1, 11.1.0 MSR2, 11.1.0 MSR3, 1.2.2 SR2, 11.1.0 … | — |