CVE-2022-20766

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to an out-of-bounds read when processing Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to cause a service restart.Cisco has released firmware updates that address this vulnerability. There are no workarounds that address this vulnerability.

• CWE-125

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multivuln-GEZYVvs

Published

Nov 15, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20760A vulnerability in the DNS inspection handler of Cisco Adapt…7.5
• CVE-2022-20761A vulnerability in the integrated wireless access point (AP)…6.5
• CVE-2022-20762A vulnerability in the Common Execution Environment (CEE) Co…7.8
• CVE-2022-20763A vulnerability in the login authorization components of Cis…8.8
• CVE-2022-20764Multiple vulnerabilities in the web engine of Cisco TelePres…8.1
• CVE-2022-20765A vulnerability in the web applications of Cisco UCS Directo…4.8
• CVE-2022-20767A vulnerability in the Snort rule evaluation function of Cis…7.5
• CVE-2022-20768A vulnerability in the logging component of Cisco TelePresen…4.9
• CVE-2022-20769A vulnerability in the authentication functionality of Cisco…6.5
• CVE-2022-2077Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-20770On April 20, 2022, the following vulnerability in the ClamAV…7.5
• CVE-2022-20771On April 20, 2022, the following vulnerability in the ClamAV…7.5