A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevat
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied credentials. An attacker could exploit this vulnerability by sending a valid low-privileged SSH key to an affected device from a host that has an IP address that is configured as the source for a high-privileged user account. A successful exploit could allow the attacker to log in to the affected device through SSH as a high-privileged user. There are workarounds that address this vulnerability.
Timeline
- CVE published
- Record last updated
Affected versions
- Cisco Cisco ASR 5000 Series Software
21.11.0, 21.11.1, 21.11.2, 21.11.3, 21.11.10, 21.11.11, 21.11.12, 21.11.13, 21.11.14, 21.11.4, 21.11.5, 21.11.6, 21.11.7, 21.11.8, 21.11.9, 21.11.15, 21.11.16, 21.11.17, 21.11.18, 21.11.19, 21.11.20, 21.11.21, 21.12.0, 21.12.1, 21.12.2, 21.12.3, 21.12.4, 21.12.5, 21.12.6, 21.12.10, and 374 more
- Cisco Cisco Ultra Cloud Core - User Plane Function
Version range not reported