CVE-2024-20463
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Cisco ATA 190 Series Analog Telephone Adapter Firmware Command Injection and Denial of Service Vulnerability
A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to modify the configuration or reboot an affected device. This vulnerability is due to the HTTP server allowing state changes in GET requests. An attacker could exploit this vulnerability by sending a malicious request to the web-based management interface on an affected device. A successful exploit could allow the attacker to make limited modifications to the configuration or reboot the device, resulting in a denial of service (DoS) condition.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco Analog Telephone Adaptor (ATA) Software
- Vendor
- Cisco
- Product
- Cisco Analog Telephone Adaptor (ATA) Software
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 12.0.1 SR2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 11.1.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 12.0.1 SR1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 11.1.0 MSR1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 12.0.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 11.1.0 MSR2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 11.1.0 MSR3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 11.1.0 MSR4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 12.0.1 SR3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 11.2.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 12.0.1 SR4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 11.2.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 11.2.2 MSR1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 12.0.1 SR5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 11.2.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 11.2.4 | affected | Unavailable | Unavailable | Unavailable | None listed |