Cisco Asr 5000 Series Software vulnerabilities

19 CVEs affecting Cisco Asr 5000 Series Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1424, published 2024-11-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-9203, published 2016-12-14. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process.…
CVE-2016-6467, published 2016-12-14. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected…
CVE-2016-1335, published 2016-02-19. High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days. The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote…
CVE-2017-3819, published 2017-03-15. High severity, CVSS 8.8. EPSS: 3.3% chance of exploitation in the next 30 days. A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized…
CVE-2016-9216, published 2017-01-26. Medium severity, CVSS 5.3. EPSS: 2.9% chance of exploitation in the next 30 days. An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an unauthenticated, remote attacker to cause the ipsecmgr process to reload. More…
CVE-2015-4201, published 2015-06-20. Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days. The Gateway General Packet Radio Service Support Node (GGSN) component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a denial of service…
CVE-2016-6466, published 2016-11-19. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. A vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels…
CVE-2015-4273, published 2015-07-15. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 15.0(912), 15.0(935), and 15.0(938) allows remote attackers to cause a denial of service (Session Manager…
CVE-2017-6612, published 2017-07-25. High severity, CVSS 8.6. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauthenticated, remote attacker to redirect…
CVE-2017-6672, published 2017-07-25. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to…

Latest

CVE-2021-1424, published 2024-11-18. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the ipsecmgr process of Cisco ASR 5000 Series Software (StarOS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This…
CVE-2018-0256, published 2018-04-19. Medium severity, CVSS 5.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the peer-to-peer message processing functionality of Cisco Packet Data Network Gateway could allow an unauthenticated, remote attacker to cause the Session Manager (SESSMGR)…