Lucene search
+L

351 matches found

OSV
OSV
•added 2021/06/04 5:15 p.m.•14 views

CVE-2021-1539

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software StarOS could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details sectio...

8.8CVSS5.9AI score0.01093EPSS
SaveExploits0References1
NVD
NVD
•added 2021/06/04 5:15 p.m.•25 views

CVE-2021-1540

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software StarOS could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details sectio...

8.1CVSS0.01053EPSS
SaveExploits0References1
Prion
Prion
•added 2021/06/04 5:15 p.m.•30 views

Authorization

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software StarOS could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details sectio...

6CVSS7AI score0.01053EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/06/04 5:15 p.m.•21 views

Authorization

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software StarOS could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details sectio...

6.5CVSS8.6AI score0.01093EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/06/04 4:46 p.m.•36 views

CVE-2021-1540 Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software StarOS could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details sectio...

8.1CVSS8.3AI score0.01053EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2021/06/04 4:46 p.m.•9 views

CVE-2021-1540 Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software StarOS could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details sectio...

8.1CVSS7.1AI score0.01053EPSS
SaveExploits0References1
CVE
CVE
•added 2021/06/04 4:45 p.m.•99 views

CVE-2021-1539

CVE-2021-1539 concerns multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) that allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. The issue stems from weaknesses in the authoriza...

8.8CVSS8.3AI score0.01093EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/06/04 4:45 p.m.•35 views

CVE-2021-1539 Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software StarOS could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details sectio...

8.1CVSS8.8AI score0.01093EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/04 12:00 a.m.•5 views

CVE-2021-1540: Incorrect Authorization

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software StarOS could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details sectio...

8.1CVSS6.1AI score0.01053EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/04 12:00 a.m.•3 views

CVE-2021-1539: Incorrect Authorization

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software StarOS could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details sectio...

8.8CVSS6.1AI score0.01093EPSS
SaveExploits0References2
NCSC
NCSC
•added 2021/06/03 12:00 a.m.•15 views

Vulnerabilities fixed in Cisco ASR 5000 series

Cisco has fixed vulnerabilities in StarOS as used by ASR 5000-series devices. The vulnerabilities allow an authenticated remote malicious party able to further authentication to bypass and execute restricted unauthenticated commands execute. To do this, the malicious party must send rogue SSH...

8.8CVSS7.4AI score0.01093EPSS
SaveExploits0
attackerkb
attackerkb
•added 2021/06/02 4:00 p.m.•10 views

CVE-2021-1539

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software StarOS could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details sectio...

8.8CVSS7.8AI score0.01093EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/06/02 4:00 p.m.•10 views

CVE-2021-1540

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software StarOS could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details sectio...

8.1CVSS7.3AI score0.01053EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/05/31 12:00 a.m.•59 views

Cisco StarOS DoS (cisco-sa-StarOS-DoS-RLLvGFJj)

According to its self-reported version, the SSH service of the Cisco StarOS operating system is affected by denial of service vulnerability due to a logic error that may occur under specific traffic conditions. An unauthenticated, remote attacker could exploit this by sending a series of crafted...

7.5CVSS7.5AI score0.01502EPSS
SaveExploits0References3
Cisco
Cisco
•added 2021/03/03 4:00 p.m.•60 views

Cisco ASR 5000 Series Software (StarOS) ipsecmgr Process Denial of Service Vulnerability

A vulnerability in the ipsecmgr process of Cisco ASR 5000 Series Software StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of incoming Internet Key Exchange Version 2 IKEv2 packets. An attacker...

5.3CVSS5.4AI score0.00811EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/03/02 12:00 a.m.•22 views

The vulnerability of the SSH service on Cisco StarOS allows a hacker to trigger a service failure.

The vulnerability of the SSH service on Cisco StarOS is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

5.3CVSS7.2AI score0.01502EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2021/02/18 12:00 a.m.•15 views

Cisco StarOS Denial of Service Vulnerability (CNVD-2021-13233)

Cisco StarOS is a router operating system that controls the entire system logic and can control processes and CLIs. A denial of service vulnerability exists in the SSH service for Cisco StarOS 21.9.0 - 21.19.10. The vulnerability stems from a logic error that can occur under certain traffic...

7.5CVSS6.7AI score0.01502EPSS
SaveExploits0References1
OSV
OSV
•added 2021/02/17 5:15 p.m.•9 views

CVE-2021-1378

A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerability is due to a logic error that may occur under specific...

7.5CVSS7.1AI score0.01502EPSS
SaveExploits0References1
NVD
NVD
•added 2021/02/17 5:15 p.m.•26 views

CVE-2021-1378

A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerability is due to a logic error that may occur under specific...

7.5CVSS0.01502EPSS
SaveExploits0References1
Prion
Prion
•added 2021/02/17 5:15 p.m.•22 views

Race condition

A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerability is due to a logic error that may occur under specific...

5CVSS7.5AI score0.01502EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder