description: A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device.
This vulnerability is due to insufficient validation of user-supplied credentials. An attacker could exploit this vulnerability by sending a valid low-privileged SSH key to an affected device from a host that has an IP address that is configured as the source for a high-privileged user account. A successful exploit could allow the attacker to log in to the affected device through SSH as a high-privileged user.
There are workarounds that address this vulnerability.
problem types: Authentication Bypass by Alternate Name
affected:
{
vendor: Cisco
product: Cisco ASR 5000 Series Software
versions:
version: 21.11.0, status: affected
version: 21.11.1, status: affected
version: 21.11.2, status: affected
version: 21.11.3, status: affected
version: 21.11.10, status: affected
version: 21.11.11, status: affected
version: 21.11.12, status: affected
version: 21.11.13, status: affected
version: 21.11.14, status: affected
version: 21.11.4, status: affected
version: 21.11.5, status: affected
version: 21.11.6, status: affected
version: 21.11.7, status: affected
version: 21.11.8, status: affected
version: 21.11.9, status: affected
version: 21.11.15, status: affected
version: 21.11.16, status: affected
version: 21.11.17, status: affected
version: 21.11.18, status: affected
version: 21.11.19, status: affected
version: 21.11.20, status: affected
version: 21.11.21, status: affected
version: 21.12.0, status: affected
version: 21.12.1, status: affected
version: 21.12.2, status: affected
version: 21.12.3, status: affected
version: 21.12.4, status: affected
version: 21.12.5, status: affected
version: 21.12.6, status: affected
version: 21.12.10, status: affected
version: 21.12.11, status: affected
version: 21.12.12, status: affected
version: 21.12.13, status: affected
version: 21.12.14, status: affected
version: 21.12.16, status: affected
version: 21.12.17, status: affected
version: 21.12.18, status: affected
version: 21.12.7, status: affected
version: 21.12.8, status: affected
version: 21.12.9, status: affected
version: 21.12.19, status: affected
version: 21.12.20, status: affected
version: 21.12.21, status: affected
version: 21.12.22, status: affected
version: 21.12.15, status: affected
version: 21.13.0, status: affected
version: 21.13.1, status: affected
version: 21.13.2, status: affected
version: 21.13.3, status: affected
version: 21.13.4, status: affected
version: 21.13.10, status: affected
version: 21.13.11, status: affected
version: 21.13.12, status: affected
version: 21.13.13, status: affected
version: 21.13.14, status: affected
version: 21.13.15, status: affected
version: 21.13.16, status: affected
version: 21.13.17, status: affected
version: 21.13.18, status: affected
version: 21.13.19, status: affected
version: 21.13.20, status: affected
version: 21.13.5, status: affected
version: 21.13.6, status: affected
version: 21.13.7, status: affected
version: 21.13.8, status: affected
version: 21.13.9, status: affected
version: 21.13.21, status: affected
version: 21.14.0, status: affected
version: 21.14.1, status: affected
version: 21.14.10, status: affected
version: 21.14.11, status: affected
version: 21.14.12, status: affected
version: 21.14.16, status: affected
version: 21.14.17, status: affected
version: 21.14.19, status: affected
version: 21.14.2, status: affected
version: 21.14.20, status: affected
version: 21.14.3, status: affected
version: 21.14.4, status: affected
version: 21.14.5, status: affected
version: 21.14.6, status: affected
version: 21.14.7, status: affected
version: 21.14.8, status: affected
version: 21.14.9, status: affected
version: 21.14.b12, status: affected
version: 21.14.b13, status: affected
version: 21.14.b14, status: affected
version: 21.14.b15, status: affected
version: 21.14.b17, status: affected
version: 21.14.b18, status: affected
version: 21.14.b19, status: affected
version: 21.14.b20, status: affected
version: 21.14.b21, status: affected
version: 21.14.22, status: affected
version: 21.14.b22, status: affected
version: 21.14.23, status: affected
version: 21.15.0, status: affected
version: 21.15.1, status: affected
version: 21.15.10, status: affected
version: 21.15.11, status: affected
version: 21.15.12, status: affected
version: 21.15.13, status: affected
version: 21.15.14, status: affected
version: 21.15.15, status: affected
version: 21.15.16, status: affected
version: 21.15.17, status: affected
version: 21.15.18, status: affected
version: 21.15.19, status: affected
version: 21.15.2, status: affected
version: 21.15.20, status: affected
version: 21.15.21, status: affected
version: 21.15.22, status: affected
version: 21.15.24, status: affected
version: 21.15.25, status: affected
version: 21.15.26, status: affected
version: 21.15.27, status: affected
version: 21.15.28, status: affected
version: 21.15.29, status: affected
version: 21.15.3, status: affected
version: 21.15.30, status: affected
version: 21.15.32, status: affected
version: 21.15.33, status: affected
version: 21.15.36, status: affected
version: 21.15.37, status: affected
version: 21.15.39, status: affected
version: 21.15.4, status: affected
version: 21.15.40, status: affected
version: 21.15.41, status: affected
version: 21.15.5, status: affected
version: 21.15.6, status: affected
version: 21.15.7, status: affected
version: 21.15.8, status: affected
version: 21.15.43, status: affected
version: 21.15.45, status: affected
version: 21.15.46, status: affected
version: 21.15.47, status: affected
version: 21.15.48, status: affected
version: 21.15.51, status: affected
version: 21.15.52, status: affected
version: 21.15.53, status: affected
version: 21.15.54, status: affected
version: 21.15.55, status: affected
version: 21.15.57, status: affected
version: 21.15.58, status: affected
version: 21.15.59, status: affected
version: 21.15.60, status: affected
version: 21.16.2, status: affected
version: 21.16.3, status: affected
version: 21.16.4, status: affected
version: 21.16.5, status: affected
version: 21.16.c10, status: affected
version: 21.16.c11, status: affected
version: 21.16.c12, status: affected
version: 21.16.c13, status: affected
version: 21.16.c9, status: affected
version: 21.16.d0, status: affected
version: 21.16.d1, status: affected
version: 21.16.6, status: affected
version: 21.16.c14, status: affected
version: 21.16.7, status: affected
version: 21.16.c15, status: affected
version: 21.16.8, status: affected
version: 21.16.c16, status: affected
version: 21.16.10, status: affected
version: 21.16.9, status: affected
version: 21.16.c17, status: affected
version: 21.16.c18, status: affected
version: 21.16.c19, status: affected
version: 21.17.0, status: affected
version: 21.17.1, status: affected
version: 21.17.2, status: affected
version: 21.17.3, status: affected
version: 21.17.4, status: affected
version: 21.17.5, status: affected
version: 21.17.6, status: affected
version: 21.17.7, status: affected
version: 21.17.8, status: affected
version: 21.17.10, status: affected
version: 21.17.11, status: affected
version: 21.17.9, status: affected
version: 21.17.12, status: affected
version: 21.17.13, status: affected
version: 21.17.14, status: affected
version: 21.17.15, status: affected
version: 21.17.16, status: affected
version: 21.17.17, status: affected
version: 21.17.18, status: affected
version: 21.17.19, status: affected
version: 21.18.0, status: affected
version: 21.18.1, status: affected
version: 21.18.2, status: affected
version: 21.18.3, status: affected
version: 21.18.4, status: affected
version: 21.18.5, status: affected
version: 21.18.11, status: affected
version: 21.18.6, status: affected
version: 21.18.7, status: affected
version: 21.18.8, status: affected
version: 21.18.9, status: affected
version: 21.18.12, status: affected
version: 21.18.13, status: affected
version: 21.18.14, status: affected
version: 21.18.15, status: affected
version: 21.18.16, status: affected
version: 21.18.17, status: affected
version: 21.18.18, status: affected
version: 21.18.19, status: affected
version: 21.18.20, status: affected
version: 21.18.21, status: affected
version: 21.18.22, status: affected
version: 21.18.23, status: affected
version: 21.18.24, status: affected
version: 21.18.25, status: affected
version: 21.18.26, status: affected
version: 21.19.0, status: affected
version: 21.19.1, status: affected
version: 21.19.2, status: affected
version: 21.19.3, status: affected
version: 21.19.n2, status: affected
version: 21.19.4, status: affected
version: 21.19.5, status: affected
version: 21.19.n3, status: affected
version: 21.19.n4, status: affected
version: 21.19.6, status: affected
version: 21.19.7, status: affected
version: 21.19.8, status: affected
version: 21.19.n5, status: affected
version: 21.19.10, status: affected
version: 21.19.9, status: affected
version: 21.19.n6, status: affected
version: 21.19.n7, status: affected
version: 21.19.n8, status: affected
version: 21.19.11, status: affected
version: 21.19.n10, status: affected
version: 21.19.n11, status: affected
version: 21.19.n12, status: affected
version: 21.19.n13, status: affected
version: 21.19.n14, status: affected
version: 21.19.n15, status: affected
version: 21.19.n16, status: affected
version: 21.19.n9, status: affected
version: 21.19.n17, status: affected
version: 21.19.n18, status: affected
version: 21.20.0, status: affected
version: 21.20.1, status: affected
version: 21.20.SV1, status: affected
version: 21.20.SV3, status: affected
version: 21.20.SV5, status: affected
version: 21.20.2, status: affected
version: 21.20.3, status: affected
version: 21.20.4, status: affected
version: 21.20.5, status: affected
version: 21.20.6, status: affected
version: 21.20.7, status: affected
version: 21.20.8, status: affected
version: 21.20.9, status: affected
version: 21.20.k6, status: affected
version: 21.20.10, status: affected
version: 21.20.11, status: affected
version: 21.20.k7, status: affected
version: 21.20.u8, status: affected
version: 21.20.12, status: affected
version: 21.20.13, status: affected
version: 21.20.14, status: affected
version: 21.20.k8, status: affected
version: 21.20.p9, status: affected
version: 21.20.15, status: affected
version: 21.20.16, status: affected
version: 21.20.17, status: affected
version: 21.20.18, status: affected
version: 21.20.19, status: affected
version: 21.20.20, status: affected
version: 21.20.21, status: affected
version: 21.20.22, status: affected
version: 21.20.23, status: affected
version: 21.20.24, status: affected
version: 21.20.25, status: affected
version: 21.20.26, status: affected
version: 21.20.28, status: affected
version: 21.20.29, status: affected
version: 21.20.30, status: affected
version: 21.20.c22, status: affected
version: 21.20.31, status: affected
version: 21.20.32, status: affected
version: 21.20.33, status: affected
version: 21.20.34, status: affected
version: 21.20.35, status: affected
version: 21.20.27, status: affected
version: 21.20.SV2, status: affected
version: 21.21.0, status: affected
version: 21.21.1, status: affected
version: 21.21.2, status: affected
version: 21.21.3, status: affected
version: 21.21.KS2, status: affected
version: 21.22.0, status: affected
version: 21.22.n2, status: affected
version: 21.22.n3, status: affected
version: 21.22.3, status: affected
version: 21.22.4, status: affected
version: 21.22.5, status: affected
version: 21.22.uj3, status: affected
version: 21.22.11, status: affected
version: 21.22.6, status: affected
version: 21.22.7, status: affected
version: 21.22.8, status: affected
version: 21.22.n4, status: affected
version: 21.22.n5, status: affected
version: 21.22.ua0, status: affected
version: 21.22.ua2, status: affected
version: 21.22.ua3, status: affected
version: 21.22.ua5, status: affected
version: 21.22.12, status: affected
version: 21.22.13, status: affected
version: 21.22.n10, status: affected
version: 21.22.n11, status: affected
version: 21.22.n12, status: affected
version: 21.22.n6, status: affected
version: 21.22.n7, status: affected
version: 21.22.n8, status: affected
version: 21.22.n9, status: affected
version: 21.22.n13, status: affected
version: 21.23.0, status: affected
version: 21.23.1, status: affected
version: 21.23.10, status: affected
version: 21.23.11, status: affected
version: 21.23.12, status: affected
version: 21.23.13, status: affected
version: 21.23.14, status: affected
version: 21.23.15, status: affected
version: 21.23.16, status: affected
version: 21.23.17, status: affected
version: 21.23.2, status: affected
version: 21.23.3, status: affected
version: 21.23.4, status: affected
version: 21.23.5, status: affected
version: 21.23.6, status: affected
version: 21.23.7, status: affected
version: 21.23.8, status: affected
version: 21.23.9, status: affected
version: 21.23.b2, status: affected
version: 21.23.b3, status: affected
version: 21.23.c16, status: affected
version: 21.23.c17, status: affected
version: 21.23.n6, status: affected
version: 21.23.n7, status: affected
version: 21.23.n9, status: affected
version: 21.23.18, status: affected
version: 21.23.19, status: affected
version: 21.23.21, status: affected
version: 21.23.22, status: affected
version: 21.23.23, status: affected
version: 21.23.24, status: affected
version: 21.23.25, status: affected
version: 21.23.26, status: affected
version: 21.23.27, status: affected
version: 21.23.29, status: affected
version: 21.23.30, status: affected
version: 21.23.c18, status: affected
version: 21.23.n10, status: affected
version: 21.23.n11, status: affected
version: 21.23.n8, status: affected
version: 21.23.yn14, status: affected
version: 21.24.0, status: affected
version: 21.24.1, status: affected
version: 21.24.2, status: affected
version: 21.24.3, status: affected
version: 21.25.0, status: affected
version: 21.25.3, status: affected
version: 21.25.4, status: affected
version: 21.25.5, status: affected
version: 21.25.10, status: affected
version: 21.25.11, status: affected
version: 21.25.12, status: affected
version: 21.25.13, status: affected
version: 21.25.14, status: affected
version: 21.25.6, status: affected
version: 21.25.7, status: affected
version: 21.25.8, status: affected
version: 21.25.9, status: affected
version: 21.26.0, status: affected
version: 21.26.1, status: affected
version: 21.26.10, status: affected
version: 21.26.13, status: affected
version: 21.26.14, status: affected
version: 21.26.15, status: affected
version: 21.26.3, status: affected
version: 21.26.5, status: affected
version: 21.26.6, status: affected
version: 21.26.7, status: affected
version: 21.26.17, status: affected
version: 21.27.0, status: affected
version: 21.27.1, status: affected
version: 21.27.2, status: affected
version: 21.27.3, status: affected
version: 21.27.4, status: affected
version: 21.27.5, status: affected
version: 21.27.m0, status: affected
version: 21.28.0, status: affected
version: 21.28.1, status: affected
version: 21.28.2, status: affected
version: 21.28.m0, status: affected
version: 21.28.m1, status: affected
version: 21.28.m2, status: affected
version: 21.28.m3, status: affected
}
{
vendor: Cisco
product: Cisco Ultra Cloud Core - User Plane Function
versions:
version: N/A, status: affected
}
metrics:
format: cvssV3_1
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
baseScore: 8.8
baseSeverity: HIGH
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
]
exploits: The Cisco PSIRT is aware that proof-of-concept exploit code is available for the vulnerability described in this advisory.
The Cisco PSIRT is not aware of any malicious use of the vulnerability that is described in this advisory.