Executive Risk Summary
"A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to view or delete the configuration or change the firmware on an affected device. This vulnerability is due to a lack of authentication on specific HTTP endpoints, allowing an attacker to exploit it by browsing to a specific URL."
Operational Audit Arsenal
Target Type Firmware Image
Target Asset Cisco ATA 190 Series Firmware
Standard Path Global Firmware
Manual Verification Required
This is a non-Windows asset (Cisco). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.
Patch Impact Forecast
Reboot Required Likely
Potential disruption to phone services
Internal Work Notes
CVE-2024-20458: Unauthenticated remote attacker can view or delete configuration or change firmware on Cisco ATA 190 Series devices due to lack of authentication on specific HTTP endpoints.
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Related Cisco Threats
Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.