CVE-2015-0617

CVE-2015-0617 affects Cisco ASR 5500 SAE Gateway devices. The vulnerability lies in the SNMP code failing to properly validate malformed SNMP packets, allowing an unauthenticated remote attacker to cause high CPU utilization and SNMP process outage (DoS). Cisco’s advisory notes that public softwa...

CVE-2014-0669

Cisco ASR 5000 Series Gateway GPRS Support Node (GGSN) vulnerability: the Wireless Session Protocol (WSP) mis-processes certain WSP packets, allowing an unauthenticated, remote attacker to bypass Top‑Up payment restrictions (browse without charging). Root cause: incorrect handling of WSP packets....

CVE-2015-6256

CVE-2015-6256 affects Cisco ASR 5000 devices running software 19.0.M0.60828, where crafted length fields in OSPF packet headers can cause the OSPF process to restart, leading to a denial of service. The vulnerability stems from improper validation of OSPF header length fields in the device’s OSPF...

CVE-2016-9216

CVE-2016-9216 describes an IKE packet parsing denial-of-service in Cisco ASR 5000 Software, affecting the ipsecmgr process. An unauthenticated, remote attacker can trigger a reload of ipsecmgr by sending specially crafted IKE packets. Root cause is a parsing/logic issue during IKE packet handling...

CVE-2017-6612

Cisco’s advisory (Cisco ASR 5000 Series GGSN Gateway Redirect Vulnerability) details a GGSN-related flaw in Cisco ASR 5000 routers that allows an unauthenticated, remote attacker to redirect HTTP traffic by manipulating HTTP payload properties. Affected are ASR 5000 Series devices running 17.3.9....

CVE-2015-4244

The CVE-2015-4244 issue affects Cisco ASR 5000 and ASR 5500 Series (ASK5K) boot software version 14.0, where the boot process improperly reads a local file on Compact Flash (CF). An authenticated, locally privileged attacker can place a file containing Linux commands on CF, causing those commands...

CVE-2017-3819

CVE-2017-3819 affects Cisco StarOS SSH login handling on Cisco ASR 5000/5500/5700 and VPC-SI/DI; vulnerability arises from missing input validation during SSH/SFTP login, allowing an authenticated attacker with valid credentials to craft input over an established TCP connection to port 22 and gai...

CVE-2015-4201

Cisco ASR 5000 GGSN vulnerability CVE-2015-4201: in Cisco GGSN TCP input handler, improper validation of TCP/IP header length allows remote attackers to restart the Session Manager, causing DoS. Affected software: ASR 5000 17.2.0.59184 and 18.0.L0.59219. Root cause is incorrect input validation o...

CVE-2018-0256

Cisco PDNG (Packet Data Network Gateway) is affected by CVE-2018-0256 in the peer-to-peer message processing path. The issue stems from incorrect validation of peer-to-peer packet headers, allowing an unauthenticated, remote attacker to send a crafted packet that can restart the Session Manager (...

CVE-2014-3331

The CVE-2014-3331 issue affects Cisco ASR 5000 Series Packet Data Network Gateway (PGW) via its Session Manager. Cisco advisory and NVD entries describe that the Session Manager can crash (denial of service) when it processes a crafted TCP packet. Impact is a process crash, with no judgeable impa...

CVE-2015-4275

CVE-2015-4275 affects the Cisco Packet Data Network Gateway (PGW) on Cisco ASR 5000 devices, specifically software 18.0.0.59167 and 18.0.0.59211. The vulnerability stems from lack of input validation in GTPv2 packet headers, allowing remote attackers to trigger a denial of service and partial ava...

CVE-2016-9203

CVE-2016-9203 affects Cisco ASR 5000 Series software via a race condition in the IKEv2 negotiation logic that can allow an unauthenticated remote attacker to crash/restart the ipsecmgr process (denial of service). Affected releases include 20.2.3 and 20.2.3.65026; fixed releases include 21.1.M0.6...

CVE-2017-6672

Cisco ASR 5000 Series Aggregation Services Routers are affected by an ACL filtering bypass vulnerability. The issue stems from certain ACL rule filtering not inspecting and matching specific traffic, allowing an unauthenticated, remote attacker to bypass configured ACL rules. Affected devices can...

CVE-2016-1335

The CVE concerns Cisco StarOS on ASR 5000 devices (StarOS before 19.3.M0.62771 and before 20.0.M0.62768 in 20.x) where the SSH subsystem mishandles multi-user public-key authentication. An authenticated remote user can escalate privileges by connecting from an endpoint previously used by an admin...

CVE-2015-4273

CVE-2015-4273 affects the Cisco ASR 5000 Series Packet Data Network Gateway (PGW) IP stack. The vulnerability arises from improper input validation of certain fields in IP packets, allowing remote, unauthenticated attackers to cause a denial of service, specifically a Session Manager outage, on d...

CVE-2016-6466

CVE-2016-6466 affects Cisco ASR 5000/5500 Series routers and Cisco VPC, via the StarOS IPsec component (ipsecmgr). The issue arises from improper processing of IKE messages, allowing an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new ones, causing a DoS ...

CVE-2016-6467

CVE-2016-6467 affects Cisco ASR 5000 Series Switches (StarOS) with IPv6 packet fragment reassembly. The root cause is lack of proper input validation of IPv6 fragment lengths, enabling an unauthenticated, remote attacker to trigger a reload of the Network Processing Unit (NPU) and cause a denial ...

CVE-2015-6382

CVE-2015-6382 affects Cisco ASR 5000 Series running 16.0(900). A remote Telnet connection can trigger the telnetd process to restart, causing a partial DoS. The root cause is described as flaws in the Telnet implementation. Cisco’s advisory states no software updates address this vulnerability an...