Staros (Cisco) - vulnerabilities (CVEs)

25 CVEs, 0 in the last 30 days, 230 known versions, newest CVE from 2025-04-16. Vendor: Cisco.

CVEs of Staros

CVE-2025-32433 - CVSS 10 (critical), 2025-04-16: Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow…
CVE-2023-20046 - CVSS 8.8 (high), 2023-05-09: A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an…
CVE-2022-20665 - CVSS 6.7 (medium), 2022-04-06: A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due…
CVE-2021-1540 - CVSS 8.1 (high), 2021-06-04: Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass…
CVE-2021-1539 - CVSS 8.8 (high), 2021-06-04: Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass…
CVE-2021-1378 - CVSS 7.5 (high), 2021-02-17: A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop…
CVE-2021-1353 - CVSS 8.6 (high), 2021-01-20: A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on…
CVE-2021-1145 - CVSS 6.5 (medium), 2021-01-13: A vulnerability in the Secure FTP (SFTP) of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an authenticated, remote attacker to read arbitrary…
CVE-2020-3601 - CVSS 6.7 (medium), 2020-10-08: A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate…
CVE-2020-3602 - CVSS 6.7 (medium), 2020-10-08: A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate…
CVE-2020-3500 - CVSS 8.6 (high), 2020-08-17: A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…
CVE-2020-3244 - CVSS 5.3 (medium), 2020-06-18: A vulnerability in the Enhanced Charging Service (ECS) functionality of Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated,…
CVE-2019-16026 - CVSS 6.8 (medium), 2020-01-26: A vulnerability in the implementation of the Stream Control Transmission Protocol (SCTP) on Cisco Mobility Management Entity (MME) could allow an…
CVE-2019-1869 - CVSS 8.6 (high), 2019-06-20: A vulnerability in the internal packet-processing functionality of the Cisco StarOS operating system running on virtual platforms could allow an…
CVE-2018-0369 - CVSS 8.6 (high), 2018-07-16: A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote…
CVE-2018-0273 - CVSS 5.3 (medium), 2018-04-19: A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC) System…
CVE-2018-0239 - CVSS 7.5 (high), 2018-04-19: A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router (ASR) 5700 Series…
CVE-2018-0224 - CVSS 6.7 (medium), 2018-03-08: A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local…
CVE-2018-0122 - CVSS 4.4 (medium), 2018-02-08: A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local…
CVE-2018-0115 - CVSS 6.7 (medium), 2018-01-18: A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authenticated, local attacker to execute…
CVE-2017-6707 - CVSS 8.2 (high), 2017-07-06: A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Series, and 5700 Series…
CVE-2017-3865 - CVSS 5.8 (medium), 2017-07-04: A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated, remote attacker to terminate all…
CVE-2015-0712 - CVSS 5 (medium), 2015-05-01: The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote attackers to cause a denial of service…
CVE-2015-0711 - CVSS 5 (medium), 2015-04-29: The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of…
CVE-2013-0149 - CVSS 5.8 (medium), 2013-08-05: The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS…