CVE-2021-1540
Published Jun 4, 2021
Last updated a year ago
Overview
- Description
- Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
- Source
- ykramarz@cisco.com
- NVD status
- Modified
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.2
- Impact score
- 5.9
- Exploitability score
- 1.2
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 6
- Impact score
- 6.4
- Exploitability score
- 6.8
- Vector string
- AV:N/AC:M/Au:S/C:P/I:P/A:P
Weaknesses
- ykramarz@cisco.com
- CWE-863
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:staros:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B3FDA9A-CEB5-451B-AE92-4AE727D477FB",
"versionEndExcluding": "21.16.9"
},
{
"criteria": "cpe:2.3:o:cisco:staros:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62DD8225-32A7-41B0-AD98-D087835FAC7E",
"versionEndExcluding": "21.17.10",
"versionStartIncluding": "21.17.0"
},
{
"criteria": "cpe:2.3:o:cisco:staros:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C993F0DB-5AD2-4FF4-AF4D-7F99C9CF0396",
"versionEndExcluding": "21.18.16",
"versionStartIncluding": "21.18.0"
},
{
"criteria": "cpe:2.3:o:cisco:staros:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "739F9C47-AEAC-41CC-B9BB-36EA43F081CB",
"versionEndExcluding": "21.19.11",
"versionStartIncluding": "21.19.0"
},
{
"criteria": "cpe:2.3:o:cisco:staros:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D823601-77FE-40A2-B281-D5E4547B28C0",
"versionEndExcluding": "21.19.n7",
"versionStartIncluding": "21.19.n"
},
{
"criteria": "cpe:2.3:o:cisco:staros:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27025ED8-2512-4F81-81F2-FD836D4CA68F",
"versionEndExcluding": "21.20.8",
"versionStartIncluding": "21.20.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "746254AC-B039-432C-AA5C-A82260E57AD7"
},
{
"criteria": "cpe:2.3:h:cisco:asr_5500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "301681DF-2A9E-4A91-9918-4A46153ADC01"
},
{
"criteria": "cpe:2.3:h:cisco:asr_5700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A9EF0299-16A7-446D-855D-BFF91EE65534"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:virtualized_packet_core:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B88F195D-ECA6-414A-B8C0-6C8B47B595E6"
}
],
"operator": "OR"
}
]
}
]