PT-2024-7344 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter

Published

2024-10-16

·

Updated

2024-10-31

·

CVE-2024-20421

CVSS v2.0
8.5
VectorAV:N/AC:L/Au:N/C:N/I:C/A:P

Name of the Vulnerable Software and Affected Versions:

Cisco ATA 190 Series Analog Telephone Adapter firmware (affected versions not specified)

Description:

A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. This issue is due to insufficient CSRF protections for the web-based management interface. An attacker could exploit this by persuading a user to follow a crafted link, potentially allowing the attacker to perform arbitrary actions with the privileges of the targeted user.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

Related Identifiers

BDU:2024-08700
CVE-2024-20421

Affected Products

Cisco Ata 190 Series Analog Telephone Adapter