ST
Product
Staros
On CISA KEVExploited in the wild
25
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 10Medium 11Low 0
Watch
Add Staros to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-32433 In wildKEV | 10.0 | Apr 16 | Erlang/OTP SSH Vulnerable to Pre-Authentication RCE Affected: before 2025.03 |
| CVE-2023-20046 | 8.8 | May 9 | A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device Affected: before 21.22.14; 21.23.0 before 21.23.31; 21.25.0 before 21.25.15; 21.26.0 before 21.26.17; 21.27.0 before 21.27.6; 21.28.0 before 21.28.3; +4 more |
| CVE-2021-1539 | 8.8 | Jun 4 | Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute… Affected: before 21.16.9; 21.17.0 before 21.17.10; 21.18.0 before 21.18.16; 21.19.0 before 21.19.11; 21.19.n before 21.19.n7; 21.20.0 before 21.20.8 |
| CVE-2021-1353 | 8.6 | Jan 20 | A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device Affected: before 21.22.0 |
| CVE-2020-3500 | 8.6 | Aug 17 | A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device Affected: before 21.18.3 |
| CVE-2018-0369 | 8.6 | Jul 16 | A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote attacker to trigger a… Affected: 21.3 before 21.3.15; 21.4 before 21.5.7; 21.6 before 21.6.4 |
| CVE-2017-6707 | 8.2 | Jul 6 | A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Series, and 5700 Series devices and Cisco… Affected: 11.0_base; 12.0.0; 12.1_base; 12.2(300); 12.2_base; 14.0(600); +34 more |
| CVE-2021-1378 | 7.5 | Feb 17 | A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic,… Affected: 21.9.0 through 21.19.10 |
| CVE-2019-1869 | 7.5 | Jun 20 | A vulnerability in the internal packet-processing functionality of the Cisco StarOS operating system running on virtual platforms could allow an unauthenticated, remote attacker… Affected: 21.6 before 21.6.13; 21.6b before 21.6b.16; 21.7 before 21.7.11; 21.8 before 21.8.10; 21.9 before 21.9.7; 21.10 before 21.10.2; +1 more |
| CVE-2018-0239 | 7.5 | Apr 19 | A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router (ASR) 5700 Series devices and Virtualized… Affected: 21.0.v0.65819; 21.0.v4; 21.1.v6; 21.3.1; 21.4.0 |
| CVE-2021-1540 | 7.2 | Jun 4 | Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute… Affected: before 21.16.9; 21.17.0 before 21.17.10; 21.18.0 before 21.18.16; 21.19.0 before 21.19.11; 21.19.n before 21.19.n7; 21.20.0 before 21.20.8 |
| CVE-2022-20665 | 6.7 | Apr 6 | A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device Affected: before 21.22.n6; 21.23.0 before 21.23.n7 |
| CVE-2020-3602 | 6.7 | Oct 8 | A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected… Affected: before 21.19.n4 |
| CVE-2020-3601 | 6.7 | Oct 8 | A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected… Affected: before 21.19.n4 |
| CVE-2018-0224 | 6.7 | Mar 8 | A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to execute… Affected: 21.3.0.67664; 21.5.0 |
| CVE-2018-0115 | 6.7 | Jan 18 | A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authenticated, local attacker to execute arbitrary commands with… Affected: All versions, or not specified |
| CVE-2021-1145 | 6.5 | Jan 13 | A vulnerability in the Secure FTP (SFTP) of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an authenticated, remote attacker to read arbitrary files on an affected… Affected: before 21.19.7 |
| CVE-2019-16026 | 5.9 | Jan 26 | A vulnerability in the implementation of the Stream Control Transmission Protocol (SCTP) on Cisco Mobility Management Entity (MME) could allow an unauthenticated, remote attacker… Affected: before 21.16.1 |
| CVE-2017-3865 | 5.8 | Jul 4 | A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels… Affected: 21.0.0; 21.0_m0.64246; 21.0_m0.64702 |
| CVE-2020-3244 | 5.3 | Jun 18 | A vulnerability in the Enhanced Charging Service (ECS) functionality of Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to… Affected: before 21.18.0 |
| CVE-2018-0273 | 5.3 | Apr 19 | A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC) System Software could allow… Affected: 19.4.2.65120; 19.6.0; 21.2.0; 21.2.6; 21.4.0 |
| CVE-2018-0122 | 4.4 | Feb 8 | A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite… Affected: 21.3.0.67664 |
| CVE-2015-0712 | – | May 1 | The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and… Affected: 12.0; 12.2(300); 14.0; 14.0(600) |
| CVE-2015-0711 | – | Apr 29 | The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service (service… Affected: 18.1.0.59776 |
| CVE-2013-0149 | – | Aug 5 | The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488… Affected: 14.0 |
Showing 25