{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:04:16Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-ata19x-multi-RDTEqRsy","slug":"cisco-sa-ata19x-multi-rdteqrsy","vendor":"Cisco","title":"Cisco ATA 190 Series Analog Telephone Adapter Firmware Vulnerabilities","summary":"Multiple vulnerabilities in Cisco ATA 190 Series Analog Telephone Adapter firmware, both on-premises and multiplatform, could allow a remote attacker to delete or change the configuration, execute commands as the root user, conduct a cross-site scripting (XSS) attack against a user of the interface, view passwords, conduct a cross-site request forgery (CSRF) attack, or reboot the device. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released firmware updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. However, there is a mitigation that addresses some of these vulnerabilities for Cisco ATA 191 on-premises firmware only. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy","severity":"High","published_at":"2024-10-16T16:00:00Z","updated_at":"2024-10-24T11:47:37Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy/csaf/cisco-sa-ata19x-multi-RDTEqRsy.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":8,"visible_product_count":1,"public_evidence_count":8,"kev_count":0,"highest_epss":0.00713},"cves":[{"id":"CVE-2024-20458","kev":false,"epss":{"score":0.00713,"percentile":0.4954,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"}},{"id":"CVE-2024-20459","kev":false,"epss":{"score":0.00682,"percentile":0.48376,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"}},{"id":"CVE-2024-20420","kev":false,"epss":{"score":0.00363,"percentile":0.28692,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"}},{"id":"CVE-2024-20463","kev":false,"epss":{"score":0.00342,"percentile":0.26416,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"}},{"id":"CVE-2024-20460","kev":false,"epss":{"score":0.0031,"percentile":0.23075,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"}},{"id":"CVE-2024-20421","kev":false,"epss":{"score":0.00235,"percentile":0.14514,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"}},{"id":"CVE-2024-20461","kev":false,"epss":{"score":0.00181,"percentile":0.07858,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"}},{"id":"CVE-2024-20462","kev":false,"epss":{"score":0.00157,"percentile":0.05283,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"}}],"public_evidence":[{"product":{"name":"Cisco Analog Telephone Adaptor (ATA) Software","slug":"cisco-analog-telephone-adaptor-ata-software","vendor":"Cisco"},"cve":{"id":"CVE-2024-20458"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:33:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Analog Telephone Adaptor (ATA) Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00713,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"},"published_at":"2024-10-16T16:00:00Z","updated_at":"2024-10-24T11:47:37Z","advisory_updated_at":"2024-10-24T11:47:37Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy"},"row_display_order":1},{"product":{"name":"Cisco Analog Telephone Adaptor (ATA) Software","slug":"cisco-analog-telephone-adaptor-ata-software","vendor":"Cisco"},"cve":{"id":"CVE-2024-20459"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:33:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Analog Telephone Adaptor (ATA) Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00682,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"},"published_at":"2024-10-16T16:00:00Z","updated_at":"2024-10-24T11:47:37Z","advisory_updated_at":"2024-10-24T11:47:37Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy"},"row_display_order":2},{"product":{"name":"Cisco Analog Telephone Adaptor (ATA) Software","slug":"cisco-analog-telephone-adaptor-ata-software","vendor":"Cisco"},"cve":{"id":"CVE-2024-20420"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:33:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Analog Telephone Adaptor (ATA) Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00363,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2024-10-16T16:00:00Z","updated_at":"2024-10-24T11:47:37Z","advisory_updated_at":"2024-10-24T11:47:37Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy"},"row_display_order":3},{"product":{"name":"Cisco Analog Telephone Adaptor (ATA) Software","slug":"cisco-analog-telephone-adaptor-ata-software","vendor":"Cisco"},"cve":{"id":"CVE-2024-20463"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:33:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Analog Telephone Adaptor (ATA) Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00342,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"},"published_at":"2024-10-16T16:00:00Z","updated_at":"2024-10-24T11:47:37Z","advisory_updated_at":"2024-10-24T11:47:37Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy"},"row_display_order":4},{"product":{"name":"Cisco Analog Telephone Adaptor (ATA) Software","slug":"cisco-analog-telephone-adaptor-ata-software","vendor":"Cisco"},"cve":{"id":"CVE-2024-20460"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:33:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Analog Telephone Adaptor (ATA) Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.0031,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"},"published_at":"2024-10-16T16:00:00Z","updated_at":"2024-10-24T11:47:37Z","advisory_updated_at":"2024-10-24T11:47:37Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy"},"row_display_order":5},{"product":{"name":"Cisco Analog Telephone Adaptor (ATA) Software","slug":"cisco-analog-telephone-adaptor-ata-software","vendor":"Cisco"},"cve":{"id":"CVE-2024-20421"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:33:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Analog Telephone Adaptor (ATA) Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00235,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2024-10-16T16:00:00Z","updated_at":"2024-10-24T11:47:37Z","advisory_updated_at":"2024-10-24T11:47:37Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy"},"row_display_order":6},{"product":{"name":"Cisco Analog Telephone Adaptor (ATA) Software","slug":"cisco-analog-telephone-adaptor-ata-software","vendor":"Cisco"},"cve":{"id":"CVE-2024-20461"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:33:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Analog Telephone Adaptor (ATA) Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00181,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"},"published_at":"2024-10-16T16:00:00Z","updated_at":"2024-10-24T11:47:37Z","advisory_updated_at":"2024-10-24T11:47:37Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy"},"row_display_order":7},{"product":{"name":"Cisco Analog Telephone Adaptor (ATA) Software","slug":"cisco-analog-telephone-adaptor-ata-software","vendor":"Cisco"},"cve":{"id":"CVE-2024-20462"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:33:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Analog Telephone Adaptor (ATA) Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00157,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:49Z"},"published_at":"2024-10-16T16:00:00Z","updated_at":"2024-10-24T11:47:37Z","advisory_updated_at":"2024-10-24T11:47:37Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy"},"row_display_order":8}]}