Cisco ASR 5500 Series Routers Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A security vulnerability exists in StarOS Slowpath in the Cisco ASR 5500 series routers when fitted with DPC2. Exploitation of this vulnerability by an...

CVE-2016-6455

A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 DPC2 could allow an unauthenticated, remote attacker to cause a subset of the subscriber sessions to be disconnected, resulting in a partial denial of service DoS condition. This vulnerability...

CVE-2016-6455

A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 DPC2 could allow an unauthenticated, remote attacker to cause a subset of the subscriber sessions to be disconnected, resulting in a partial denial of service DoS condition. This vulnerability...

Race condition

A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 DPC2 could allow an unauthenticated, remote attacker to cause a subset of the subscriber sessions to be disconnected, resulting in a partial denial of service DoS condition. This vulnerability...

CVE-2016-6455

CVE-2016-6455 concerns the Slowpath in StarOS on Cisco ASR 5500 Series routers with Data Processing Card 2 (DPC2). An unauthenticated, remote attacker can disrupt a subset of subscriber sessions by sending crafted IPv4/IPv6 fragments, causing the sessmgr service to reload and triggering a denial ...

CVE-2016-6455

A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 DPC2 could allow an unauthenticated, remote attacker to cause a subset of the subscriber sessions to be disconnected, resulting in a partial denial of service DoS condition. This vulnerability...

DMA Radius Manager 4.1.5 Cross Site Request Forgery

tanks: Dr Ms Jk - n1arash - Milad Hacking - malahsky...

Vulnerability in Objective Systems ASN1C Compiler Affecting Cisco Products

A vulnerability in the ASN1C compiler by Objective Systems affects Cisco ASR 5000 devices running StarOS and Cisco Virtualized Packet Core VPC systems. The vulnerability could allow an unauthenticated, remote attacker to create a denial of service DoS condition or potentially execute arbitrary...

Cisco ASR 5000 Series StarOS SSH Subsystem Privilege Escalation (CSCux22492)

The remote Cisco ASR 5000 Series device is affected by a privilege escalation vulnerability in the SSH subsystem due to improper handling of multi-user public-key authentication. An authenticated, remote attacker can exploit this, by establishing a connection from an endpoint that was previously...

Cisco StarOS Elevation of Privilege Vulnerability

Cisco StarOS on ASR 5000 is a set of operating systems from Cisco that run on 5000 series router devices. An elevation of privilege vulnerability in Cisco StarOS on Cisco ASR 5000 prior to version 19.3.M0.62771 and version 20.x prior to version 20.0.M0.62768 allows an authenticated remote user to...

CVE-2016-1335

The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote authenticated users to gain privileges by establishing a connection from an endpoint that was previous...

CVE-2016-1335

The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote authenticated users to gain privileges by establishing a connection from an endpoint that was previous...

Authentication flaw

The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote authenticated users to gain privileges by establishing a connection from an endpoint that was previous...

CVE-2016-1335

The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote authenticated users to gain privileges by establishing a connection from an endpoint that was previous...

CVE-2016-1335

The CVE concerns Cisco StarOS on ASR 5000 devices (StarOS before 19.3.M0.62771 and before 20.0.M0.62768 in 20.x) where the SSH subsystem mishandles multi-user public-key authentication. An authenticated remote user can escalate privileges by connecting from an endpoint previously used by an admin...

Cisco ASR 5000 Series StarOS SSH Subsystem Privilege Escalation Vulnerability

A privilege escalation vulnerability in the SSH subsystem in Cisco ASR 5000 Series devices running StarOS could allow an authenticated, remote attacker to elevate privileges. The attacker would need to have a valid and configured SSH authorized key and access to the same device from which the...

Cisco StarOS Session Management Service Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-grade platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE, with Cisco StarOS as the operating system on board. A security vulnerability in the session-manager service of Cisco StarOS on Cisco ASR 5000 devices could be...

CVE-2015-0712

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

Session fixation

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

CVE-2015-0712

Cisco StarOS for ASR 5000 Series (12.0, 12.2(300), 14.0, 14.0(600)) uses a vulnerable session-manager service that can be remotely triggered to reload, causing DoS via malformed HTTP packets (Bug CSCud14217). Affected devices process HTTP at the session-manager, and the issue’s exploitation leads...