CVE-2013-1111
The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implement access control, which allows remote attackers to execute operating-system commands via vectors involving a session on TCP port…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.43%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implement access control, which allows remote attackers to execute operating-system commands via vectors involving a session on TCP port 7870, aka Bug ID CSCtz67038.
- CVSS 2.0
- 9.0 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:C
- EPSS
- 1.43% probability · 71th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- cisco/ata 187 analog telephone adaptor firmware · cisco/ata 187 analog telephone adaptor
- Source
- psirt@cisco.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.