21.23.2

DATE	CVE	VULNERABILITY TITLE	RISK
2023-05-09	CVE-2023-20046	Insufficiently Protected Credentials vulnerability in Cisco Staros A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied credentials. network low complexity cisco CWE-522	8.8
2022-04-06	CVE-2022-20665	Command Injection vulnerability in Cisco Staros A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. local low complexity cisco CWE-77	6.7