A5
Product
Asr 5000 Series Software
19
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 3Low 0
Watch
Add Asr 5000 Series Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-3819 | 8.8 | Mar 15 | A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and… Affected: 18.0.0; 18.0.0.57828; 18.0.0.59167; 18.0.0.59211; 18.0.l0.59219; 18.1.0; +15 more |
| CVE-2017-6612 | 8.6 | Jul 25 | A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauthenticated, remote… Affected: 17.3.9.62033; 17.7.5; 19.6.3; 20.1.2; 20.2.12; 21.0.1; +1 more |
| CVE-2017-6672 | 7.5 | Jul 25 | A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated,… Affected: 19.3.5; 19.3.11; 19.3.12; 19.6.0; 19.6.3; 19.6.6; +17 more |
| CVE-2016-9203 | 7.5 | Dec 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the… Affected: 20.0.2.3.65026 |
| CVE-2016-6467 | 7.5 | Dec 14 | A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an unauthenticated, remote attacker to… Affected: 20.0.0; 21.0.0; 21.0.m0.64702 |
| CVE-2016-6466 | 7.5 | Nov 19 | A vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and… Affected: 20.0.0; 20.0.2.3; 20.0.2.v1 |
| CVE-2016-1335 | 7.5 | Feb 19 | The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration,… Affected: 16.5.2; 17.7.0; 18.4.0; 19.0.1; 19.3.0; 20.0.0 |
| CVE-2018-0256 | 5.8 | Apr 19 | A vulnerability in the peer-to-peer message processing functionality of Cisco Packet Data Network Gateway could allow an unauthenticated, remote attacker to cause the Session… Affected: 20.3.0.66671; p2p_2.16.879 |
| CVE-2021-1424 | 5.3 | Nov 18 | Cisco ASR 5000 Series Software (StarOS) ipsecmgr Process Denial of Service Vulnerability Affected: 21.15.7; 21.13.10; 21.14.1; 21.11.5; 21.13.8; 21.14.5; +34 more |
| CVE-2016-9216 | 5.3 | Jan 26 | An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an unauthenticated, remote attacker to cause the ipsecmgr… Affected: 20.0.0; 20.0.1.0; 20.0.1.a0; 20.0.1.v0; 20.0.m0.62842; 20.0.m0.63229; +2 more |
| CVE-2015-6382 | – | Nov 26 | Cisco ASR 5000 devices with software 16.0(900) allow remote attackers to cause a denial of service (telnetd process restart) via a TELNET connection, aka Bug ID CSCuv25815 Affected: 16.0(900) |
| CVE-2015-6256 | – | Aug 22 | Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service (OSPF process restart) via crafted length fields in headers of OSPF packets,… Affected: 19.0.m0.60828 |
| CVE-2015-4275 | – | Jul 16 | The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via… Affected: 18.0.0.59167; 18.0.0.59211 |
| CVE-2015-4273 | – | Jul 15 | The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 15.0(912), 15.0(935), and 15.0(938) allows remote attackers to cause a denial of… Affected: 15.0(912); 15.0(935); 15.0(938) |
| CVE-2015-4244 | – | Jul 10 | The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for… Affected: 14.0 |
| CVE-2015-4201 | – | Jun 20 | The Gateway General Packet Radio Service Support Node (GGSN) component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a… Affected: 17.2.0.59184; 18.0.l059219 |
| CVE-2015-0617 | – | Feb 18 | Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices allow remote attackers to cause a denial of service (CPU consumption and SNMP outage) via malformed SNMP… Affected: All versions, or not specified |
| CVE-2014-3331 | – | Aug 20 | The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, 16.x through 16.1.2, and 17.0 allows… Affected: 11.0; 12.0; 12.1; 12.2; 14.0; 15.0; +4 more |
| CVE-2014-0669 | – | Jan 22 | The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up… Affected: All versions, or not specified |
Showing 19