Known vulnerabilities in Cisco StarOS

Vendor: Cisco Systems, Inc
Software: Cisco StarOS
Software CPE: cpe:2.3:o:cisco_systems:cisco_staros:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco StarOS Cisco StarOS is affected by 13 known vulnerabilities: 8 medium, 5 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75372 - Credentials Management
CVE-2023-20046		 CWE-255 Medium
No
No
 21.22.n14, 21.22.14, 21.23.n12, 21.23.31, 21.25.15, 21.26.17, 21.27.m1, 21.27.6, 21.28.m4, 21.28.3 20.04.2023 SB2023042025
#VU60964 - Command injection
CVE-2022-20665		 CWE-77 Low
No
No
 21.22.n6, 21.22.12, 21.23.n7, 21.23.11 02.03.2022 SB2022030221
#VU53747 - Improper Authorization
CVE-2021-1540		 CWE-285 Medium
No
No
 21.16.9, 21.17.10, 21.18.16, 21.19.n7, 21.20.8, 26.19.11 02.06.2021 SB2021060213
#VU53746 - Improper Authorization
CVE-2021-1539		 CWE-285 Medium
No
No
 21.16.9, 21.17.10, 21.18.16, 21.19.n7, 21.20.8, 26.19.11 02.06.2021 SB2021060213
#VU50784 - Resource exhaustion
CVE-2021-1378		 CWE-400 Medium
No
No
 21.20.0 17.02.2021 SB2021021724
#VU50065 - Missing release of memory after effective lifetime
CVE-2021-1353		 CWE-401 Medium
No
No
 21.22.0 20.01.2021 SB2021012722
#VU49575 - UNIX Symbolic Link (Symlink) Following
CVE-2021-1145		 CWE-61 Medium
No
No
 21.19.7 13.01.2021 SB2021011811
#VU47436 - Permissions, Privileges, and Access Controls
CVE-2020-3601		 CWE-264 Low
No
No
 21.19.n4 08.10.2020 SB2020100810
#VU47435 - Permissions, Privileges, and Access Controls
CVE-2020-3602		 CWE-264 Low
No
No
 21.19.n4 08.10.2020 SB2020100810
#VU34085 - Improper input validation
CVE-2020-3500		 CWE-20 Medium
No
No
 21.18.3 06.08.2020 SB2020080604
#VU34084 - Improper input validation
CVE-2020-3324		 CWE-20 Medium
No
No
 21.15.31, 21.16.c11, 21.16.4, 21.17.4 06.08.2020 SB2020080605
#VU13855 - Improper input validation
CVE-2018-0369		 CWE-20 Low
No
No
 - 11.07.2018 SB2018071305
#VU10119 - Command injection
CVE-2018-0115		 CWE-77 Low
No
No
 - 22.01.2018 SB2018011910