Cisco Systems Inc. Analog Telephone Adapter (ATA) 191

Name: Cisco Systems Inc. Analog Telephone Adapter (ATA) 191
Brand: Cisco Systems Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical8high8medium0low

updated 2026-10-28

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-34710US	high8.8	2.61% (85th)	—	no fix	2021-10-06	12.0 → 12.0(1)SR4
CVE-2021-34735US	high7.5	1.88% (79th)	—	no fix	2021-10-06	12.0 → 12.0(1)SR4
CVE-2022-20688US	medium5.3	1.00% (63rd)	—	no fix	2022-12-12	≤ 12.0(1)SR5
CVE-2022-20687US	medium5.3	1.00% (63rd)	—	no fix	2022-12-12	≤ 12.0(1)SR5
CVE-2022-20686US	medium5.3	1.00% (63rd)	—	no fix	2022-12-12	≤ 12.0(1)SR5
CVE-2022-20766US	—	0.86% (58th)	—	no fix	2024-11-15	≤ 12.0(1)SR5
CVE-2022-20690US	high8.8	0.78% (56th)	—	no fix	2022-12-12	≤ 12.0(1)SR5
CVE-2024-20458US	high8.2	0.71% (54th)	—	no fix	2024-10-16	≤ 12.0.2
CVE-2022-20689US	high8.8	0.68% (52nd)	—	no fix	2022-12-12	≤ 12.0(1)SR5
CVE-2024-20459US	high7.2	0.67% (52nd)	—	no fix	2024-10-16	≤ 12.0.2
CVE-2022-20691US	medium6.5	0.67% (52nd)	—	no fix	2022-12-12	≤ 12.0(1)SR5
CVE-2024-20463US	high7.1OT elevated	0.38% (32nd)	—	no fix	2024-10-16	≤ 12.0.2
CVE-2024-20420US	high8.8OT elevated	0.36% (29th)	—	no fix	2024-10-16	≤ 12.0.2
CVE-2024-20460US	medium6.1	0.34% (27th)	—	no fix	2024-10-16	≤ 12.0.2
CVE-2024-20421US	medium6.5	0.24% (15th)	—	no fix	2024-10-16	≤ 12.0.2
CVE-2024-20461US	medium6.0	0.18% (8th)	—	no fix	2024-10-16	≤ 12.0.2
CVE-2024-20462US	medium5.5	0.16% (5th)	—	no fix	2024-10-16	≤ 12.0.2

The flaw types (CWEs) most of these CVEs share.

CWE-1284Improper Validation of Specified Quantity in Input6 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-20Improper Input Validation1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.