CVE-2021-1540

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Score

CVSS 3.1 8.1 High

Status

Modified - psirt@cisco.com

Published

2021-06-04

Last modified

2024-11-07

Weaknesses

CWE-863

Affected products

• Cisco Asr 5000 Series Software (Cisco)
• Staros (Cisco)
• Virtualized Packet Core (Cisco)

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr5k-autho-bypass-mJDF5S7n