PT-2023-2547 · Cisco · Cisco Staros

Name of the Vulnerable Software and Affected Versions: Cisco StarOS Software affected versions not specified Description: The issue arises from insufficient validation of user-supplied credentials in the key-based SSH authentication feature. This could allow a remote attacker to elevate privilege...

The vulnerability of the Cisco Redundancy Configuration Manager (RCM) operating system for StarOS allows a intruder to disclose protected information.

The vulnerability of the Cisco Redundancy Configuration Manager RCM operating system for StarOS is related to the lack of protection for mission-critical data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the StarOS operating system arises from the improper activation of the debugging mode for certain services, allowing a perpetrator to execute arbitrary code.

The vulnerability of the StarOS operating system exists due to the incorrect activation of the debugging mode for certain services. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-20665

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A...

CVE-2022-20665

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A...

Input validation

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A...

CVE-2022-20665 Cisco StarOS Command Injection Vulnerability

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A...

CVE-2022-20665 Cisco StarOS Command Injection Vulnerability

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A...

CVE-2022-20665

CVE-2022-20665 is a Cisco StarOS command-injection vulnerability in the CLI. It arises from insufficient input validation of CLI commands, enabling an authenticated, local attacker with administrative credentials to execute arbitrary code with root privileges on an affected device. Exploitation w...

The vulnerability of the command-line interface of StarOS systems allows attackers to execute arbitrary commands and increase their privileges.

The vulnerability of the command-line interface of StarOS systems is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

Cisco StarOS Command Injection (cisco-sa-staros-cmdinj-759mNT4n)

According to its self-reported version, the Cisco StarOS operating system is affected by a command injection vulnerability due to insufficient input validation of CLI commands. An authenticated, local attacker could exploit this by sending crafted commands to the CLI. A successful exploit could...

CVE-2022-20665

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A...

Cisco StarOS Command Injection Vulnerability

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A...

Cisco StarOS 命令注入漏洞

Cisco StarOS is a virtualized operating system from Cisco. A command injection vulnerability exists in Cisco StarOS that can be exploited by an authenticated, local attacker to elevate privileges on an affected device. The vulnerability is due to insufficient input validation of CLI commands. An...

The vulnerability of the Cisco Redundancy Configuration Manager (RCM) operating system for StarOS allows a intruder to trigger a reboot of the vulnerable device.

The vulnerability of the Cisco Redundancy Configuration Manager RCM operating system for StarOS exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to trigger a restart of the vulnerable device...

Cisco RCM for Cisco StarOS Software拒绝服务漏洞

Cisco RCM for Cisco StarOS Software is a denial-of-service vulnerability that could be exploited to cause the checkpoint manager process to restart upon receipt of malformed TCP data...

CVE-2022-20750

A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration Manager RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to cause the checkpoint manager process to restart upon receipt of malformed TCP data. This vulnerability is due to...

CVE-2022-20750 Cisco Redundancy Configuration Manager for Cisco StarOS Software TCP Denial of Service Vulnerability

A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration Manager RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to cause the checkpoint manager process to restart upon receipt of malformed TCP data. This vulnerability is due to...

CVE-2022-20750 Cisco Redundancy Configuration Manager for Cisco StarOS Software TCP Denial of Service Vulnerability

A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration Manager RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to cause the checkpoint manager process to restart upon receipt of malformed TCP data. This vulnerability is due to...

CVE-2022-20750

CVE-2022-20750 describes a DoS vulnerability in the Cisco StarOS RCM checkpoint manager, triggered by malformed TCP data. The issue stems from improper input validation of ingress TCP packets, allowing an unauthenticated, remote attacker to cause the checkpoint manager process to restart and rend...