Cisco ATA 190 Multiplatform Series Analog Telephone Adapter Vulnerability

CVE-2024-20459

What is CVE-2024-20459?

A vulnerability exists in the web-based management interface of the Cisco ATA 190 Multiplatform Series Analog Telephone Adapter firmware. This issue stems from inadequate input sanitization, which could permit an authenticated remote attacker with elevated privileges to execute arbitrary commands as the root user on the underlying operating system. By crafting a malicious request directed at the affected management interface, attackers may exploit this vulnerability to gain unauthorized access and control, posing significant risks to system integrity and security.

References