CVE-2013-1111

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-02-13 · updated 2026-06-16
Weakness: CWE-264

Description

The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implement access control, which allows remote attackers to execute operating-system commands via vectors involving a session on TCP port 7870, aka Bug ID CSCtz67038.

Affected products

Cisco Ata 187 Analog Telephone Adaptor: all versions
Cisco Ata 187 Analog Telephone Adaptor Firmware: 9.2.1.0, 9.2.3.1

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130206-ata187
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130206-ata187

Get alerted when CVE-2013-1111 or the next vulnerability affects your stack