Vulnerabilities > Cisco > Virtualized Packet Core

DATE CVE VULNERABILITY TITLE RISK
2021-06-04 CVE-2021-1539 Incorrect Authorization vulnerability in Cisco Staros
Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device.
network
low complexity
cisco CWE-863
8.8
2021-06-04 CVE-2021-1540 Incorrect Authorization vulnerability in Cisco Staros
Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device.
network
low complexity
cisco CWE-863
7.2
2017-06-26 CVE-2017-6678 Improper Handling of Exceptional Conditions vulnerability in Cisco Virtualized Packet Core
A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function (CF) instances on an affected system to reload, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-755
7.8
2017-03-15 CVE-2017-3819 Missing Authentication for Critical Function vulnerability in Cisco ASR 5000 Series Software and Virtualized Packet Core
A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized Packet Core could allow an authenticated, remote attacker to gain unrestricted, root shell access.
network
low complexity
cisco CWE-306
critical
9.0
2016-11-19 CVE-2016-6466 Resource Management Errors vulnerability in Cisco ASR 5000 Series Software and Virtualized Packet Core
A vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from establishing, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-399
5.0