A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authenticated, local attack

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• cisco starosall versions

Versions reported by the vendor

Affected version ranges reported by the assigning authority (cisco). Independent of NVD's CPE analysis and usually ahead of it.

• n/a Cisco StarOS

  • Cisco StarOSaffected

Other highest-scoring records for the same primary product.

• CVE-2023-20046A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevat
  35Monitor
• CVE-2021-1539Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities
  35Monitor
• CVE-2018-0369A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthentica
  35Monitor
• CVE-2021-1353Cisco StarOS IPv4 Denial of Service Vulnerability
  34Monitor
• CVE-2020-3500Cisco StarOS IPv6 Denial of Service Vulnerability
  34Monitor
• CVE-2017-6707A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Serie
  32Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

User input is inserted as text into a shell command. The shell may interpret special characters in the input as part of the command.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1const host = req.body.host;2exec("ping -c 1 " + host, onResult);

1const host = req.body.host;2if (!/^[a-z0-9.-]{1,253}$/i.test(host)) return res.sendStatus(400);3execFile("ping", ["-c", "1", host], onResult);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.