CVE-2024-20463: Cisco ATA 190 Series Analog Telephone Adapter Firmware Command Injection and Denial of Service Vulnerability
First published: Wed Oct 16 2024(Updated: )
A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to modify the configuration or reboot an affected device. This vulnerability is due to the HTTP server allowing state changes in GET requests. An attacker could exploit this vulnerability by sending a malicious request to the web-based management interface on an affected device. A successful exploit could allow the attacker to make limited modifications to the configuration or reboot the device, resulting in a denial of service (DoS) condition.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Cisco ATA 191 | <12.0.2 | |
| Cisco ATA | ||
| All of | ||
| Cisco ATA 191 | <11.2.5 | |
| Cisco ATA | ||
| All of | ||
| Cisco ATA 192 | <11.2.5 | |
| Cisco ATA |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-20463?
CVE-2024-20463 has a severity rating of high due to the potential for unauthorized remote access to device configurations.
How do I fix CVE-2024-20463?
To fix CVE-2024-20463, update the Cisco ATA 190 Series Analog Telephone Adapter firmware to the latest version.
Who is affected by CVE-2024-20463?
CVE-2024-20463 affects users of the Cisco ATA 190 Series Analog Telephone Adapter running specific vulnerable firmware versions.
Can CVE-2024-20463 allow attackers to reboot devices?
Yes, CVE-2024-20463 allows unauthenticated remote attackers to reboot affected devices due to configuration modification capabilities.
What type of devices are impacted by CVE-2024-20463?
CVE-2024-20463 impacts the Cisco ATA 191 and Cisco ATA 192 series of Analog Telephone Adapters.
- agent/references
- agent/title
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ata 191
- canonical/cisco ata
- canonical/cisco ata 192