CVE-2021-1540: Cisco Staros

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco Staros: before 21.16.9 (fixed in 21.16.9); from 21.17.0, before 21.17.10 (fixed in 21.17.10); from 21.18.0, before 21.18.16 (fixed in 21.18.16); from 21.19.0, before 21.19.11 (fixed in 21.19.11); from 21.19.n, before 21.19.n7 (fixed in 21.19.n7); from 21.20.0, before 21.20.8 (fixed in 21.20.8)
• Cisco Virtualized Packet Core: affected versions not specified

Published 2021-06-04. Last modified 2026-06-17.