5.3
Moyenne
CVE-2021-1424 A vulnerability in the ipsecmgr process of Cisco ASR 5000 Series Software (StarOS) could allow an…
Description
A vulnerability in the ipsecmgr process of Cisco ASR 5000 Series Software (StarOS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to insufficient validation of incoming Internet Key Exchange Version 2 (IKEv2) packets. An attacker could exploit this vulnerability by sending specifically malformed IKEv2 packets to an affected device. A successful exploit could allow the attacker to cause the ipsecmgr process to restart, which would disrupt ongoing IKE negotiations and result in a temporary DoS condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco ASR 5000 Series Software 21.21 | 21.21.0 → 21.21.1 | Pas de correctif indiqué |
| Cisco ASR 5000 Series Software 21.20 | 21.20.SV1 → 21.20.11 | Pas de correctif indiqué |
| Cisco ASR 5000 Series Software 21.19 | 21.19.n3 → 21.19.10 | Pas de correctif indiqué |
| Cisco ASR 5000 Series Software 21.18 | 21.18.0 → 21.18.15 | Pas de correctif indiqué |
| Cisco ASR 5000 Series Software 21.17 | 21.17.0 → 21.17.17 | Pas de correctif indiqué |
| Cisco ASR 5000 Series Software 21.16 | 21.16.d0 → 21.16.8 | Pas de correctif indiqué |
| Cisco ASR 5000 Series Software 21.15 | 21.15.0 → 21.15.55 | Pas de correctif indiqué |
| Cisco ASR 5000 Series Software 21.14 | 21.14.a0 → 21.14.23 | Pas de correctif indiqué |
| Cisco ASR 5000 Series Software 21.13 | 21.13.0 → 21.13.21 | Pas de correctif indiqué |
Afficher les 13 autres branches Masquer les 13 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco ASR 5000 Series Software 21.12 | 21.12.0 → 21.12.21 | Pas de correctif indiqué |
| Cisco ASR 5000 Series Software 21.11 | 21.11.0 → 21.11.19 | Pas de correctif indiqué |
| asr_5000_series_software 21.21 | 21.21.0 → 21.21.1 | Pas de correctif indiqué |
| asr_5000_series_software 21.20 | 21.20.sv1 → 21.20.11 | Pas de correctif indiqué |
| asr_5000_series_software 21.19 | 21.19.n3 → 21.19.10 | Pas de correctif indiqué |
| asr_5000_series_software 21.18 | 21.18.0 → 21.18.15 | Pas de correctif indiqué |
| asr_5000_series_software 21.17 | 21.17.0 → 21.17.17 | Pas de correctif indiqué |
| asr_5000_series_software 21.16 | 21.16.d0 → 21.16.8 | Pas de correctif indiqué |
| asr_5000_series_software 21.15 | 21.15.0 → 21.15.55 | Pas de correctif indiqué |
| asr_5000_series_software 21.14 | 21.14.a0 → 21.14.23 | Pas de correctif indiqué |
| asr_5000_series_software 21.13 | 21.13.0 → 21.13.21 | Pas de correctif indiqué |
| asr_5000_series_software 21.12 | 21.12.0 → 21.12.21 | Pas de correctif indiqué |
| asr_5000_series_software 21.11 | 21.11.0 → 21.11.19 | Pas de correctif indiqué |
Références
- cisco-sa-staros-ipsecmgr-dos-3gkHXwvS sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco ASR 5000 Series Software
Les 15 CVE de Cisco ASR 5000 Series Software →
CVE-2023-20046
A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated,…
8.8
Élevée
CVE-2023-20051
A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an…
5.8
Moyenne
CVE-2022-20665
A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an…
6.0
Moyenne
CVE-2021-1540
Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an…
8.1
Élevée