Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:ata_190_firmware:12.0.1_sr5:*:*:*:*:*:*:*

part: o version: 12.0.1_sr5 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductAta 190 Firmware (7a56717d-796b-5067-a197-6271031bbf5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-20461 vulnerable 2026-06-08 06:27:28.350618 Cisco ATA 190 Series Analog Telephone Adapter Firmware Command Injection Vulnerability
MEDIUM (6)
A vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, local attacker with high privileges to execute arbitrary commands as the root user. This vulnerability exists because CLI input is not properly sanitized. An attacker could exploit this vulnerability by sending malicious characters to the CLI. A successful exploit could allow the attacker to read and write to the underlying operating system as the root user.
Published: 2024-10-16T16:16:34.394Z
Updated: 2024-10-16T19:39:07.390Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20459 vulnerable 2026-06-08 06:27:28.343307 Cisco ATA 190 Series Analog Telephone Adapter Muliplatform Firmware Command Injection Vulnerability
MEDIUM (6.5)
A vulnerability in the web-based management interface of Cisco ATA 190 Multiplatform Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with high privileges to execute arbitrary commands as the root user on the underlying operating system. This vulnerability is due to a lack of input sanitization in the web-based management interface. An attacker could exploit this vulnerability by sending a malicious request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.
Published: 2024-10-16T16:16:12.834Z
Updated: 2024-10-16T17:56:02.319Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20458 vulnerable 2026-06-08 06:27:28.340734 Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities
HIGH (8.2)
A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to view or delete the configuration or change the firmware on an affected device. This vulnerability is due to a lack of authentication on specific HTTP endpoints. An attacker could exploit this vulnerability by browsing to a specific URL. A successful exploit could allow the attacker to view or delete the configuration or change the firmware.
Published: 2024-10-16T16:16:04.241Z
Updated: 2024-10-16T19:38:32.175Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.