CVE-2024-20458

CVE-2024-20458 is a high-severity vulnerability affecting the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapters (models 191 and 192). This flaw stems from a lack of authentication on specific HTTP endpoints, allowing an unauthenticated, remote attacker to view or delete device configurations or alter firmware. The vulnerability has a CVSS score of 8.2 (High) due to its network-based attack vector, low attack complexity, and high impact on integrity and low impact on availability. While there is no known active exploitation, public exploit code, or KEV listing, the vulnerability has garnered some community discussion and media coverage.