cisco virtualized packet core-single instance - vulnerabilities and exploits

(subscribe to this query)

6

CVSSv2

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote malicious user to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilitie...

Cisco Staros Cisco Virtualized Packet Core -

6.5

CVSSv2

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote malicious user to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilitie...

Cisco Staros Cisco Virtualized Packet Core -

5

CVSSv2

A vulnerability in the internal packet-processing functionality of the Cisco StarOS operating system running on virtual platforms could allow an unauthenticated, remote malicious user to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) c...

Cisco Staros

7.2

CVSSv2

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local malicious user to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted c...

Cisco Staros

5

CVSSv2

A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote malicious user to trigger a reload of the npusim process, resulting in a denial of service (DoS) condition. There are four insta...

Cisco Staros

5

CVSSv2

A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a memory leak that occurs during packet processing. An attacker coul...

Cisco Staros Cisco Virtualized Packet Core-single Instance -

NA

A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote malicious user to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied credentials. An attacker cou...

Cisco Staros Cisco Staros 21.23.n Cisco Staros 21.24 Cisco Staros 21.27.m Cisco Staros 21.28.m

9

CVSSv2

A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized Packet Core could allow an authenticated, remote malicious user to gain unrestricted,...

Cisco Asr 5000 Series Software 18.1.0 Cisco Asr 5000 Series Software 19.0.m0.60737 Cisco Asr 5000 Series Software 20.0.0 Cisco Asr 5000 Series Software 19.0.m0.61045 Cisco Asr 5000 Series Software 18.1 Base Cisco Asr 5000 Series Software 18.0.0.57828 Cisco Asr 5000 Series Software 19.0.m0.60828 Cisco Asr 5000 Series Software 18.4.0 Cisco Asr 5000 Series Software 18.3 Base Cisco Asr 5000 Series Software 18.1.0.59776 Cisco Asr 5000 Series Software 19.1.0.61559 Cisco Virtualized Packet Core V19.0 Base Cisco Virtualized Packet Core V18.0 Base Cisco Asr 5000 Series Software 19.3.0 Cisco Asr 5000 Series Software 18.0.0.59211 Cisco Asr 5000 Series Software 18.1.0.59780 Cisco Asr 5000 Series Software 19.2.0 Cisco Asr 5000 Series Software 18.3.0 Cisco Virtualized Packet Core V20.0 Base Cisco Asr 5000 Series Software 18.0.l0.59219 Cisco Asr 5000 Series Software 19.0.1 Cisco Asr 5000 Series Software 18.0.0.59167

NA

A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit t...

7.8

CVSSv2

A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exp...

Cisco Staros

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook