CVE-2024-20461

CVE-2024-20461 is a command injection vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapters, including models ATA 191 and ATA 192. An authenticated, high-privileged local attacker can exploit improper input sanitization to execute arbitrary commands as the root user. This vulnerability has a CVSS score of 6.0 (MEDIUM) due to its local attack vector and high impact on confidentiality and integrity, allowing root-level read and write access to the operating system. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.