NetSight
high8.1

CVE-2021-1540

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass author…

Impact

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

VendorProductAffected versions
CiscoStaros
before 21.16.9
from 21.17.0 before 21.17.10
from 21.18.0 before 21.18.16
from 21.19.0 before 21.19.11
from 21.19.n before 21.19.n7
from 21.20.0 before 21.20.8
CiscoVirtualized Packet Core
All versions

Weakness classification

References