ST
Product
Staros
On CISA KEVExploited in the wild
25
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 10Medium 11Low 0
Watch
Add Staros to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20046 | 8.8 | May 9 | A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device Affected: before 21.22.14; 21.23.0 before 21.23.31; 21.25.0 before 21.25.15; 21.26.0 before 21.26.17; 21.27.0 before 21.27.6; 21.28.0 before 21.28.3; +4 more |
| CVE-2021-1539 | 8.8 | Jun 4 | Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute… Affected: before 21.16.9; 21.17.0 before 21.17.10; 21.18.0 before 21.18.16; 21.19.0 before 21.19.11; 21.19.n before 21.19.n7; 21.20.0 before 21.20.8 |
| CVE-2021-1353 | 8.6 | Jan 20 | A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device Affected: before 21.22.0 |
| CVE-2020-3500 | 8.6 | Aug 17 | A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device Affected: before 21.18.3 |
| CVE-2018-0369 | 8.6 | Jul 16 | A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote attacker to trigger a… Affected: 21.3 before 21.3.15; 21.4 before 21.5.7; 21.6 before 21.6.4 |
| CVE-2017-6707 | 8.2 | Jul 6 | A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Series, and 5700 Series devices and Cisco… Affected: 11.0_base; 12.0.0; 12.1_base; 12.2(300); 12.2_base; 14.0(600); +34 more |
| CVE-2021-1378 | 7.5 | Feb 17 | A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic,… Affected: 21.9.0 through 21.19.10 |
| CVE-2019-1869 | 7.5 | Jun 20 | A vulnerability in the internal packet-processing functionality of the Cisco StarOS operating system running on virtual platforms could allow an unauthenticated, remote attacker… Affected: 21.6 before 21.6.13; 21.6b before 21.6b.16; 21.7 before 21.7.11; 21.8 before 21.8.10; 21.9 before 21.9.7; 21.10 before 21.10.2; +1 more |
| CVE-2018-0239 | 7.5 | Apr 19 | A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router (ASR) 5700 Series devices and Virtualized… Affected: 21.0.v0.65819; 21.0.v4; 21.1.v6; 21.3.1; 21.4.0 |
| CVE-2021-1540 | 7.2 | Jun 4 | Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute… Affected: before 21.16.9; 21.17.0 before 21.17.10; 21.18.0 before 21.18.16; 21.19.0 before 21.19.11; 21.19.n before 21.19.n7; 21.20.0 before 21.20.8 |
Showing 10