CVE-2021-1424
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/RL:X/RC:X/E:X
Summary
A vulnerability in the ipsecmgr process of Cisco ASR 5000 Series Software (StarOS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to insufficient validation of incoming Internet Key Exchange Version 2 (IKEv2) packets. An attacker could exploit this vulnerability by sending specifically malformed IKEv2 packets to an affected device. A successful exploit could allow the attacker to cause the ipsecmgr process to restart, which would disrupt ongoing IKE negotiations and result in a temporary DoS condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco ASR 5000 Series Software | 21.15.7 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.10 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.1 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.5 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.8 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.5 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.8 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.11 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.8 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.9 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.5 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.7 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.5 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.0 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.2 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.6 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.2 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.3 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.0 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.2 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.7 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.4 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.12 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.4 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.5 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.a0 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.9 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.0 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.4 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.7 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.3 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.2 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.10 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.4 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.6 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.3 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.13 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.11 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.10 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.9 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.1 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.7 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.3 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.3 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.2 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.14 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.1 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.6 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.12 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.8 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.1 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.1 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.6 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.9 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.4 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.0 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.6 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.8 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.0 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.15 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.11 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.2 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.13 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.12 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.b15 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.0 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.10 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.16 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.12 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.20 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.10 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.18 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.14 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.15 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.21 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.17 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.1 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.b14 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.13 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.14 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.19 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.11 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.22 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.3 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.b13 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.16 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.b12 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.2 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.16 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.b17 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.24 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.c9 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.25 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.26 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.d0 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.4 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.27 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.17 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.0 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.28 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.17 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.d1 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.1 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.3 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.b18 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.c10 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.11 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.29 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.30 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.18 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.16 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.5 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.c11 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.32 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.19 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.33 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.12 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.0 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.2 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.19 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.1 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.6 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.13 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.17 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.36 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.3 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.b19 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.2 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.37 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.7 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.20 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.c12 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.4 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.3 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.20 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.40 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.b20 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.4 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.5 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.b21 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.c13 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.14 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.18 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.SV1 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.0 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.41 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.SV2 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.8 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.1 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.SV3 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.5 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.SV5 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.43 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.4 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.6 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.45 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.2 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.c14 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.9 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.15 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.22 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.3 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.46 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.7 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.n3 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.47 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.48 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.5 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.10 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.8 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.6 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.19 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.13.21 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.4 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.9 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.n4 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.11 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.11 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.6 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.c15 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.7 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.12 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.21.0 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.13 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.16 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.20 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.12 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.12.21 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.b22 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.7 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.6 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.13 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.n5 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.14 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.7 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.17 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.14 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.8 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.8 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.9 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.15 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.9 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.18.15 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.51 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.14.23 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.10 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.k6 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.18 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.19.n6 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.16.8 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.52 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.16 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.10 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.53 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.11.19 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.k7 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.54 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.11 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.20.u8 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.21.1 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.17.17 | affected |
| Cisco | Cisco ASR 5000 Series Software | 21.15.55 | affected |
Weaknesses
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: partial
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-staros-ipsecmgr-dos-3gkHXwvS
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-xss-webui-gQLSFyPM
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-sigverbypass-gPYXd6Mk
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-info-disclo-VOu2GHbZ
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xrbgp-rpki-dos-gvmjqxbk
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.