PT-2018-8795

Name of the Vulnerable Software and Affected Versions Cisco Virtualized Packet Core-Single Instance VPC-SI affected versions not specified Cisco Virtualized Packet Core-Distributed Instance VPC-DI affected versions not specified Cisco Ultra Packet Core UPC affected versions not specified...

CVE-2018-0117

A vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software could allow an unauthenticated, remote attacker to cause both control function CF instances on an affected system to reload, resulting in a denial of service Do...

CVE-2018-0117

A vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software could allow an unauthenticated, remote attacker to cause both control function CF instances on an affected system to reload, resulting in a denial of service Do...

CVE-2018-0117: Improper Input Validation

A vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software could allow an unauthenticated, remote attacker to cause both control function CF instances on an affected system to reload, resulting in a denial of service Do...

PT-2018-8623

Name of the Vulnerable Software and Affected Versions: Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software versions N4.0 through N5.5 Cisco StarOS operating system versions 19.2 through 21.3 Description: A vulnerability in the ingress packet processing functionality could allow an...

CVE-2017-6729: Undefined Security Weakness

A vulnerability in the Border Gateway Protocol BGP processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core VPC Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reloa...

PT-2017-17280

Name of the Vulnerable Software and Affected Versions Cisco StarOS versions prior to 21.3.A0.65902 Cisco StarOS versions prior to 21.2.A0.65905 Cisco StarOS versions prior to 21.1.b0.66164 Cisco StarOS versions prior to 21.1.V0.66014 Cisco StarOS versions prior to 21.1.R0.65898 Cisco StarOS...

CVE-2017-6707

CVE-2017-6707 affects Cisco StarOS CLI on ASR 5000/5500/5700 series and Cisco VPC Software. The issue stems from improper sanitization of CLI commands before they are inserted into Linux shell commands, allowing an authenticated local attacker to break out of the StarOS CLI and execute arbitrary ...

CVE-2017-6707

A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Series, and 5700 Series devices and Cisco Virtualized Packet Core VPC Software could allow an authenticated, local attacker to break from the StarOS CLI of an...

CVE-2017-6678

A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function CF instances on an affected system to reload, resulting in a...

CVE-2017-6678: Improper Handling of Exceptional Conditions

A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function CF instances on an affected system to reload, resulting in a...

PT-2017-17237

Name of the Vulnerable Software and Affected Versions Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software versions 19.2 through 21.0 Description The issue is related to insufficient handling of user-supplied data in the ingress UDP packet processing functionality. An unauthenticate...

CVE-2017-3819: Missing Authentication for Critical Function

A privilege escalation vulnerability in the Secure Shell SSH subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized Packet Core could allow an authenticated, remote attacker to gain unrestricted, root shell access. The...

PT-2017-3052

Name of the Vulnerable Software and Affected Versions StarOS versions after 17.7.0 and prior to 18.7.4, 19.5, and 20.2.3 Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices running StarOS versions after 17.7.0 and prior to 18.7.4, 19.5, and 20.2.3 Cisco Virtualized Packet Core - Singl...

CVE-2016-6466: Undefined Security Weakness

A vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from establishing, resulting in a denial of service DoS condition. This vulnerability affects the...