CVE-2016-1452

Cisco ASR 5000 Series devices running software 18.3–20.0.0 are affected by CVE-2016-1452. The issue stems from an SNMP read-write community string that is not confidential, enabling remote attackers to read/modify device configuration and perform changes over SNMP. The vulnerability is fixed in C...

CVE-2017-6775

Cisco StarOS on the Cisco ASR 5000 Series (StarOS 21.0.v0.65839) contains a local privilege escalation in the CLI. The flaw stems from incorrect permissions assigned to a set of users, allowing an authenticated attacker to log into the device shell and elevate privileges to admin-level by modifyi...

CVE-2015-6340

CVE-2015-6340 affects Cisco ASR 5000 CDMA PMIPv6 implementation (software 19.0.M0.60737). The root cause is improper input validation of PMIPv6 headers, which can be exploited remotely to cause a denial of service by restarting the hamgr process. Technical details and affected component/version a...

CVE-2017-6690

The CVE-2017-6690 issue affects Cisco ASR 5000 Series Aggregated Services Routers running Cisco StarOS. Root cause: insufficient input validation in the file check operation. Impact: authenticated, remote attacker could overwrite or modify arbitrary files on an affected system. Affected releases ...

CVE-2017-6773

Cisco StarOS on ASR 5000 Series (StarOS 21.0.v0.65839) contains a local CLI input-validation vulnerability that allows an authenticated attacker to bypass CLI restrictions and run commands on the underlying OS. The issue stems from insufficient input sanitization in the CLI; an attacker could scr...

CVE-2017-6774

CVE-2017-6774 affects Cisco ASR 5000 Series Aggregated Services Routers running StarOS. The issue is an arbitrary file write via FTP: sensitive system/configuration files can be overwritten because they are exposed in specific FTP subdirectories. A remote, authenticated attacker could exploit thi...

CVE-2015-6334

The CVE-2015-6334 issue affects Cisco ASR 5000 and ASR 5500 systems running software 18.0.0.57828 and 19.0.M0.61045. A crafted TACACS header in a TACACS packet can trigger the vpnmgr process to restart, causing a denial of service. The root cause is improper input validation of the TACACS packet ...

CVE-2016-1436

CVE-2016-1436 affects Cisco ASR 5000 Series Packet Data Network Gateway devices. The vulnerability arises from the General Packet Radio Switching Tunneling Protocol Version 1 (GTPv1) implementation, due to improper input validation of GTPv1 headers. A crafted GTPv1 packet can cause the Session Ma...

CVE-2016-6455

CVE-2016-6455 concerns the Slowpath in StarOS on Cisco ASR 5500 Series routers with Data Processing Card 2 (DPC2). An unauthenticated, remote attacker can disrupt a subset of subscriber sessions by sending crafted IPv4/IPv6 fragments, causing the sessmgr service to reload and triggering a denial ...

CVE-2017-6729

CVE-2017-6729 concerns Cisco StarOS BGP processing in Cisco ASR 5000 Series Routers and Cisco VPC Software. An unauthenticated, remote attacker can trigger a BGP process reload by sending crafted TCP packets, causing a DoS. The root cause is improper boundary controls for the BGP peering sessions...

CVE-2015-6351

Cisco ASR 5500 SAE Gateway devices running 19.1.0.61559 or 19.2.0 are vulnerable to a denial-of-service via crafted BGP headers due to insufficient input validation in the BGP packet handler. Exploitation can cause the BGP process to restart (partial DoS). Cisco has published a security advisory ...