CVE-2024-20462
Cisco ATA 190 Series Analog Telephone Adapter Muliplatform Firmware Information Disclosure Vulnerability
Description
A vulnerability in the web-based management interface of Cisco ATA 190 Series Multiplatform Analog Telephone Adapter firmware could allow an authenticated, local attacker with low privileges to view passwords on an affected device. This vulnerability is due to incorrect sanitization of HTML content from an affected device. A successful exploit could allow the attacker to view passwords that belong to other users.
Weakness: CWE-257
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco Analog Telephone Adaptor | Other Products | cna-assigner |
Vendor-reported products (1)
- Cisco · Cisco Analog Telephone Adaptor (ATA) Software
Vendor advisory
cisco-sa-ata19x-multi-RDTEqRsy
Cisco ATA 190 Series Analog Telephone Adapter Firmware Vulnerabilities
Cisco’s rating: High (advisory CVSS 8.2) · Published Oct 16, 2024 · updated Oct 24, 2024 (revision 1.1)
Bug IDs: CSCwf28037 , CSCwf28041 , CSCwf28048 , CSCwf28097 , CSCwf28102 , CSCwf28188 , CSCwf28191 , CSCwf28345 , CSCwf28348 , CSCwf28378 , CSCwf28398 , CSCwf28421 , CSCwf28426 , CSCwf28499 , CSCwf30963
The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from