CVE-2013-1111

The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implement access control, which allows remote attackers to execute operating-system commands via vectors involving a session on TCP port 7870, aka Bug ID CSCtz67038.

Score

CVSS 2.0 9.0 Critical

Status

Modified - psirt@cisco.com

Published

2013-02-13

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Ata 187 Analog Telephone Adaptor (Cisco)
• Ata 187 Analog Telephone Adaptor Firmware (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130206-ata187