Cisco ASR 5000 Series Software vulnerabilities

2 known vulnerabilities in Cisco ASR 5000 Series Software from Cisco. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Cisco ASR 5000 Series Software: Insufficiently Protected Credentials

  CVE-2023-20046May 9, 2023CiscoEPSS 1.56%

  A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied credentials. A

• 7.5 High severity

  Cisco ASR 5000 Series Software: Uncontrolled Resource Consumption

  CVE-2023-20051Apr 5, 2023Cisco

  A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an unauthenticated, remote attacker to stop ICMP traffic from being processed over an IPsec connection. This vulnerability is due to the VPP improperly