Cisco Ata 191 Firmware vulnerabilities

16 CVEs affecting Cisco Ata 191 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20463, published 2024-10-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-34710, published 2021-10-06. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perform a command injection attack resulting in remote code execution or cause a…
CVE-2021-34735, published 2021-10-06. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perform a command injection attack resulting in remote code execution or cause a…
CVE-2022-20688, published 2022-12-12. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an…
CVE-2022-20687, published 2022-12-12. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute…
CVE-2022-20686, published 2022-12-12. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute…
CVE-2022-20690, published 2022-12-12. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco…
CVE-2024-20458, published 2024-10-16. High severity, CVSS 8.2. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to view or delete the configuration or…
CVE-2022-20689, published 2022-12-12. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco…
CVE-2024-20459, published 2024-10-16. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco ATA 190 Multiplatform Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with high privileges to…
CVE-2022-20691, published 2022-12-12. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause a DoS condition of…

Latest

CVE-2024-20463, published 2024-10-16. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to modify the configuration or reboot…
CVE-2024-20462, published 2024-10-16. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco ATA 190 Series Multiplatform Analog Telephone Adapter firmware could allow an authenticated, local attacker with low privileges to view…
CVE-2024-20461, published 2024-10-16. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, local attacker with high privileges to execute arbitrary commands as the root…
CVE-2024-20460, published 2024-10-16. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a reflected cross-site…
CVE-2024-20421, published 2024-10-16. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery…
CVE-2024-20420, published 2024-10-16. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with low privileges to run commands as an…