Cisco Virtualized Packet Core vulnerabilities

5 CVEs affecting Cisco Virtualized Packet Core, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1540, published 2021-06-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-3819, published 2017-03-15. High severity, CVSS 8.8. EPSS: 3.3% chance of exploitation in the next 30 days. A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized…
CVE-2016-6466, published 2016-11-19. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. A vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels…
CVE-2017-6678, published 2017-06-26. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software 19.2 through 21.0 could allow an unauthenticated, remote…
CVE-2021-1539, published 2021-06-04. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI…
CVE-2021-1540, published 2021-06-04. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI…