← volver
CVE-2021-1378

Cisco StarOS Denial of Service Vulnerability

CVSS 5.3 MEDIUMEPSS 1.5%CWE-400
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 5.3EPSS 1.5%KEV nãoPoC Nuclei Metasploit Patch referenciado
Ciclo de vida
17 feb 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition. The vulnerability is due to a logic error that may occur under specific traffic conditions. An attacker could exploit this vulnerability by sending a series of crafted packets to an affected device. A successful exploit could allow the attacker to prevent the targeted service from receiving any traffic, which would lead to a DoS condition on the affected device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →