CVE-2024-20458 - Cisco ATA 190 Series Analog Telephone Adapter Unauthenticated Remote Code Execution

1 month ago 14
ARTICLE AD BOX
CVE ID : CVE-2024-20458
Published : Oct. 16, 2024, 5:15 p.m. | 24 minutes ago
Description : A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to view or delete the configuration or change the firmware on an affected device. This vulnerability is due to a lack of authentication on specific HTTP endpoints. An attacker could exploit this vulnerability by browsing to a specific URL. A successful exploit could allow the attacker to view or delete the configuration or change the firmware.
Severity: 8.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Read Entire Article