Storing passwords in a recoverable format in Cisco Systems, Inc products - CVE-2024-20462

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU98783

Storing passwords in a recoverable format in Cisco Systems, Inc products - CVE-2024-20462

Published: October 17, 2024


Vulnerability identifier: #VU98783
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-20462
CWE-ID: CWE-257
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to incorrect sanitization of HTML content from an affected device. A local user can view passwords that belong to other users.


Affected software

ATA 191 Multiplatform Analog Telephone Adapter
ATA 192 Multiplatform Analog Telephone Adapter
ATA 190 Series Analog Telephone Adapters

How to mitigate CVE-2024-20462

Install updates from vendor's website.

ATA 191 Multiplatform Analog Telephone Adapter - update to 11.2.5
ATA 192 Multiplatform Analog Telephone Adapter - update to 11.2.5

External References

Related Security Bulletins