CVE-2022-20766: Cisco Ata 190 Firmware

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to an out-of-bounds read when processing Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to cause a service restart.Cisco has released firmware updates that address this vulnerability. There are no workarounds that address this vulnerability.

Affected products

• Cisco Ata 190 Firmware: any version
• Cisco Cisco Analog Telephone Adaptor Ata Software: version 2.16(1) only; version 2.16(2) only; version 2.1(6) only; version 2.14 only; version 3.2(0) only; version 1.1(4) only; …

Published 2024-11-15. Last modified 2026-06-17.