CVSS 8.8 · High EPSS 0,86%
Kerentanan Authentication Bypass by Alternate Name pada cisco staros. Skor CVSS 3.1 8.8 (High) menurut NVD.
A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied credentials. An attacker could exploit this vulnerability by sending a valid low-privileged SSH key to an affected device from a host that has an IP address that is configured as the source for a high-privileged user account. A successful exploit could allow the attacker to log in to the affected device through SSH as a high-privileged user. There are workarounds that address this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| cisco | staros | Semua versi sebelum 21.22.14 |
| cisco | staros | Versi 21.23.0 hingga sebelum 21.23.31 |
| cisco | staros | Versi 21.25.0 hingga sebelum 21.25.15 |
| cisco | staros | Versi 21.26.0 hingga sebelum 21.26.17 |
| cisco | staros | Versi 21.27.0 hingga sebelum 21.27.6 |
| cisco | staros | Versi 21.28.0 hingga sebelum 21.28.3 |
| cisco | staros | Versi 21.23.n |
| cisco | staros | Versi 21.24 |
| cisco | staros | Versi 21.27.m |
| cisco | staros | Versi 21.28.m |