Vulnerability Description
The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implement access control, which allows remote attackers to execute operating-system commands via vectors involving a session on TCP port 7870, aka Bug ID CSCtz67038.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ata 187 Analog Telephone Adaptor Firmware | 9.2.1.0 |
| Cisco | Ata 187 Analog Telephone Adaptor | - |
Related Weaknesses (CWE)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20Vendor Advisory
FAQ
What is CVE-2013-1111?
CVE-2013-1111 is a vulnerability with a CVSS score of 9.0 (HIGH). The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implement access control, which allows remote attackers to execute operating-system com...
How severe is CVE-2013-1111?
CVE-2013-1111 has been rated HIGH with a CVSS base score of 9.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-1111?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ata 187 Analog Telephone Adaptor Firmware, Cisco Ata 187 Analog Telephone Adaptor.