Cisco Asr 5000 Series Software — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Asr 5000 Series Software, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (18)

• CVE-2017-3819 — CVSS 8.8 (high): A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500…
• CVE-2017-6612 — CVSS 8.6 (high): A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2…
• CVE-2016-1335 — CVSS 7.5 (high): The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user…
• CVE-2017-6672 — CVSS 7.5 (high): A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers…
• CVE-2016-6466 — CVSS 7.5 (high): A vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an unauthenticated, remote attacker to…
• CVE-2016-9203 — CVSS 7.5 (high): A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco ASR 5000 Series Software could allow an unauthenticated…
• CVE-2016-6467 — CVSS 7.5 (high): A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an…
• CVE-2015-4244 — CVSS 7.2 (high): The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by…
• CVE-2018-0256 — CVSS 5.8 (medium): A vulnerability in the peer-to-peer message processing functionality of Cisco Packet Data Network Gateway could allow an unauthenticated…
• CVE-2016-9216 — CVSS 5.3 (medium): An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an unauthenticated…
• CVE-2015-6256 — CVSS 5.0 (medium): Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service (OSPF process restart) via crafted…
• CVE-2015-4275 — CVSS 5.0 (medium): The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote…
• CVE-2015-4273 — CVSS 5.0 (medium): The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 15.0(912), 15.0(935), and 15.0(938) allows…
• CVE-2015-4201 — CVSS 5.0 (medium): The Gateway General Packet Radio Service Support Node (GGSN) component on Cisco ASR 5000 devices with software 17.2.0.59184 and…
• CVE-2015-0617 — CVSS 5.0 (medium): Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices allow remote attackers to cause a denial of service (CPU consumption and…
• CVE-2014-0669 — CVSS 5.0 (medium): The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows…
• CVE-2015-6382 — CVSS 5.0 (medium): Cisco ASR 5000 devices with software 16.0(900) allow remote attackers to cause a denial of service (telnetd process restart) via a TELNET…
• CVE-2014-3331 — CVSS 4.3 (medium): The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0…