CVE-2021-1378

published 2021-02-17

CVE-2021-1378: A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition. The vulnerability is due to a logic error that may occur under specific traffic conditions. An attacker could exploit this vulnerability by sending a series of crafted packets to an affected device. A successful exploit could allow the attacker to prevent the targeted service from receiving any traffic, which would lead to a DoS condition on the affected device.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_asr_5000_series_software	—	—
cisco	staros	—	—
cisco	staros	21.9.0 – 21.19.10	—

CWE-400