Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

25 records in Staros · all components

TI-2019-01491 CVE-2019-1869 · GHSA-r863-66v2-rjq3

Cisco StarOS Denial of Service Vulnerability

Priority MEDIUM 48

A vulnerability in the internal packet-processing functionality of the Cisco StarOS operating system running on virtual platforms could allow an unauthenticated, remote attacker to cause an affected device to stop proces…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0264 Published 2019-06-20 Fixed in 21.11.1 CWE-824
TI-2018-00328 CVE-2018-0369 · GHSA-cmmh-whh8-pwmv

Improper input validation in Cisco StarOS unknown

Priority MEDIUM 48

A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote attacker to trigger a reload of the npusim process, resulting in a d…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0227 Published 2018-07-16 No fix listed CWE-20
TI-2021-01080 CVE-2021-1353 · GHSA-92xw-vwgc-8994

Cisco StarOS IPv4 Denial of Service Vulnerability

Priority MEDIUM 46

A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.013 Published 2021-01-20 No fix listed CWE-401
TI-2018-00201 CVE-2018-0239 · GHSA-fr97-4833-96q9

Improper input validation in Cisco StarOS

Priority MEDIUM 45

A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router (ASR) 5700 Series devices and Virtualized Packet Core (VPC) System Software could a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03354 Published 2018-04-19 No fix listed CWE-20
TI-2021-01105 CVE-2021-1378 · GHSA-qj86-q34h-pf43

Cisco StarOS Denial of Service Vulnerability

Priority MEDIUM 42

A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01502 Published 2021-02-17 No fix listed CWE-400
TI-2023-06755 CVE-2023-20046

Insufficiently protected credentials in Cisco ASR 5000 Series Software

Priority MEDIUM 41

A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01564 Published 2023-05-09 No fix listed CWE-289
TI-2020-03046 CVE-2020-3500 · GHSA-5vvg-4mgq-x55f

Cisco StarOS IPv6 Denial of Service Vulnerability

Priority MEDIUM 41

A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01618 Published 2020-08-17 No fix listed CWE-119
TI-2021-01265 CVE-2021-1539 · GHSA-mmm7-3gcg-h332

Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities

Priority MEDIUM 40

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected d…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01093 Published 2021-06-04 No fix listed CWE-863
TI-2021-01266 CVE-2021-1540 · GHSA-f834-hxf4-wmxm

Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities

Priority LOW 37

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected d…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01053 Published 2021-06-04 No fix listed CWE-863
TI-2017-04463 CVE-2017-6707 · GHSA-vrh9-8v6g-q73c

OS command injection in Cisco StarOS

Priority LOW 37

A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Series, and 5700 Series devices and Cisco Virtualized Packet Core (VPC) Software coul…

CVSS 3.0HIGH 8.2 Local High privileges No interaction EPSS 0.00787 Published 2017-07-06 No fix listed CWE-78
TI-2018-00232 CVE-2018-0273 · GHSA-vx8f-xw5m-52fj

Resource management flaw in Cisco StarOS IPsec Manager

Priority LOW 36

A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to te…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.0316 Published 2018-04-19 No fix listed CWE-399
TI-2020-02804 CVE-2020-3244 · GHSA-mp76-mqjp-pxx7

Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability

Priority LOW 32

A vulnerability in the Enhanced Charging Service (ECS) functionality of Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass the traffic classification rules on an…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01011 Published 2020-06-18 No fix listed CWE-20
TI-2018-00188 CVE-2018-0224 · GHSA-6vmj-2vrv-cwf9

Command injection in Cisco StarOS

Priority LOW 32

A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to execute arbitrary commands with root privileges on an…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00453 Published 2018-03-08 No fix listed CWE-77
TI-2018-00090 CVE-2018-0115 · GHSA-c98r-w87r-fgfv

OS command injection in Cisco StarOS

Priority LOW 32

A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authenticated, local attacker to execute arbitrary commands with root privileges on an affected host operat…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00445 Published 2018-01-18 No fix listed CWE-78
TI-2022-05224 CVE-2022-20665 · GHSA-mf37-5pqc-748x

Cisco StarOS Command Injection Vulnerability

Priority LOW 31

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00308 Published 2022-04-06 No fix listed CWE-77
TI-2020-03142 CVE-2020-3602 · GHSA-5c39-v7fv-jprr

Cisco StarOS Privilege Escalation Vulnerability

Priority LOW 30

A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected device.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00387 Published 2020-10-08 No fix listed CWE-20
TI-2020-03141 CVE-2020-3601 · GHSA-gfq9-6wmw-v68g

Cisco StarOS Privilege Escalation Vulnerability

Priority LOW 30

A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected device.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00377 Published 2020-10-08 No fix listed CWE-20
TI-2019-12061 CVE-2019-16026 · GHSA-fhjc-mpvv-5r8g

Cisco Mobility Management Entity Denial of Service Vulnerability

Priority LOW 29

A vulnerability in the implementation of the Stream Control Transmission Protocol (SCTP) on Cisco Mobility Management Entity (MME) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condit…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01389 Published 2020-01-26 No fix listed CWE-20
TI-2015-00662 CVE-2015-0711 · GHSA-27c3-mh68-3469

The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS…

Priority LOW 26

The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and call-processing outage) via malform…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01746 Published 2015-04-29 No fix listed CWE-399
TI-2015-00663 CVE-2015-0712 · GHSA-q89c-84wv-f79v

The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR…

Priority LOW 25

The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and packet loss) via malformed HTTP packets, aka B…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01218 Published 2015-05-01 No fix listed CWE-399
TI-2018-00097 CVE-2018-0122 · GHSA-vrq7-hq3r-99cx

Improper input validation in Cisco StarOS for Cisco ASR 5000 Series Aggregation Services…

Priority LOW 21

A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite system files that are stored in the flash m…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00373 Published 2018-02-08 No fix listed CWE-20
Open these records in search →