CVE-2021-1540CWE-863

Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities

High · published June 4, 2021

CVSS v3.1
8.1
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01053 · 64.1th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-06-04T16:46Z
EPSS history
Timeline
  • 04 JUN 16:46Z
    Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities
    cvelistv5