5.3
Medium
CVE-2021-1424 A vulnerability in the ipsecmgr process of Cisco ASR 5000 Series Software (StarOS) could allow an…
Description
A vulnerability in the ipsecmgr process of Cisco ASR 5000 Series Software (StarOS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to insufficient validation of incoming Internet Key Exchange Version 2 (IKEv2) packets. An attacker could exploit this vulnerability by sending specifically malformed IKEv2 packets to an affected device. A successful exploit could allow the attacker to cause the ipsecmgr process to restart, which would disrupt ongoing IKE negotiations and result in a temporary DoS condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco ASR 5000 Series Software 21.21 | 21.21.0 → 21.21.1 | No fix stated |
| Cisco ASR 5000 Series Software 21.20 | 21.20.SV1 → 21.20.11 | No fix stated |
| Cisco ASR 5000 Series Software 21.19 | 21.19.n3 → 21.19.10 | No fix stated |
| Cisco ASR 5000 Series Software 21.18 | 21.18.0 → 21.18.15 | No fix stated |
| Cisco ASR 5000 Series Software 21.17 | 21.17.0 → 21.17.17 | No fix stated |
| Cisco ASR 5000 Series Software 21.16 | 21.16.d0 → 21.16.8 | No fix stated |
| Cisco ASR 5000 Series Software 21.15 | 21.15.0 → 21.15.55 | No fix stated |
| Cisco ASR 5000 Series Software 21.14 | 21.14.a0 → 21.14.23 | No fix stated |
| Cisco ASR 5000 Series Software 21.13 | 21.13.0 → 21.13.21 | No fix stated |
Show the 13 other branches Hide the 13 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco ASR 5000 Series Software 21.12 | 21.12.0 → 21.12.21 | No fix stated |
| Cisco ASR 5000 Series Software 21.11 | 21.11.0 → 21.11.19 | No fix stated |
| asr_5000_series_software 21.21 | 21.21.0 → 21.21.1 | No fix stated |
| asr_5000_series_software 21.20 | 21.20.sv1 → 21.20.11 | No fix stated |
| asr_5000_series_software 21.19 | 21.19.n3 → 21.19.10 | No fix stated |
| asr_5000_series_software 21.18 | 21.18.0 → 21.18.15 | No fix stated |
| asr_5000_series_software 21.17 | 21.17.0 → 21.17.17 | No fix stated |
| asr_5000_series_software 21.16 | 21.16.d0 → 21.16.8 | No fix stated |
| asr_5000_series_software 21.15 | 21.15.0 → 21.15.55 | No fix stated |
| asr_5000_series_software 21.14 | 21.14.a0 → 21.14.23 | No fix stated |
| asr_5000_series_software 21.13 | 21.13.0 → 21.13.21 | No fix stated |
| asr_5000_series_software 21.12 | 21.12.0 → 21.12.21 | No fix stated |
| asr_5000_series_software 21.11 | 21.11.0 → 21.11.19 | No fix stated |
References
- cisco-sa-staros-ipsecmgr-dos-3gkHXwvS sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco ASR 5000 Series Software
The 15 CVEs of Cisco ASR 5000 Series Software →
CVE-2023-20046
A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated,…
8.8
High
CVE-2023-20051
A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an…
5.8
Medium
CVE-2022-20665
A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an…
6.0
Medium
CVE-2021-1540
Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an…
8.1
High