Cisco Asr 5000 Software vulnerabilities

11 CVEs affecting Cisco Asr 5000 Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-6775, published 2017-08-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-6729, published 2017-07-10. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software…
CVE-2015-6340, published 2015-10-27. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote attackers to cause a denial of service (hamgr process restart)…
CVE-2015-6334, published 2015-10-16. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service (vpnmgr process restart) via a crafted header in a TACACS packet, aka…
CVE-2016-1436, published 2016-06-23. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. The General Packet Radio Switching Tunneling Protocol 1 (aka GTPv1) implementation on Cisco ASR 5000 Packet Data Network Gateway devices before 19.4 allows remote attackers to cause a denial of…
CVE-2016-6455, published 2016-11-03. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 (DPC2) could allow an unauthenticated, remote attacker to cause a subset of the subscriber…
CVE-2015-6351, published 2015-10-30. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices with software 19.1.0.61559 and 19.2.0 allow remote attackers to cause a denial of service (BGP process restart) via a crafted header…
CVE-2017-6690, published 2017-06-13. Medium severity, CVSS 4.9. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite…
CVE-2017-6774, published 2017-08-17. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system…
CVE-2016-1452, published 2016-07-15. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make configuration changes over SNMP by leveraging knowledge of the read-write community, aka Bug ID CSCuz29526.
CVE-2017-6773, published 2017-08-17. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to bypass the CLI restrictions…

Latest

CVE-2017-6775, published 2017-08-17. Medium severity, CVSS 5.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to…