Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:asr_5000_series_software:21.16.3:*:*:*:*:*:*:*

part: a version: 21.16.3 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductAsr 5000 Series Software (e9d624a6-e636-5ded-ae5c-18d6cfd3247e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-1424 vulnerable 2026-06-08 05:28:14.437978 Cisco ASR 5000 Series Software (StarOS) ipsecmgr Process Denial of Service Vulnerability
MEDIUM (5.3)
A vulnerability in the ipsecmgr process of Cisco ASR 5000 Series Software (StarOS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to insufficient validation of incoming Internet Key Exchange Version 2 (IKEv2) packets. An attacker could exploit this vulnerability by sending specifically malformed IKEv2 packets to an affected device. A successful exploit could allow the attacker to cause the ipsecmgr process to restart, which would disrupt ongoing IKE negotiations and result in a temporary DoS condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Published: 2024-11-18T15:35:11.060Z
Updated: 2024-11-18T16:18:16.475Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.