What’s Vulnerable › Products

Cisco StarOS vulnerabilities

25 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Cisco StarOS version is affected

Exploited Cisco StarOS vulnerabilities

• CVE-2025-32433 — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

Latest Cisco StarOS vulnerabilities

• CVE-2025-32433 — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability (CVSS 10.0) — exploited
• CVE-2023-20046 — (CVSS 8.8)
• CVE-2022-20665 — Cisco StarOS Command Injection Vulnerability (CVSS 6.7)
• CVE-2021-1540 — Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities (CVSS 7.2)
• CVE-2021-1539 — Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities (CVSS 8.8)
• CVE-2021-1378 — Cisco StarOS Denial of Service Vulnerability (CVSS 7.5)
• CVE-2021-1353 — Cisco StarOS IPv4 Denial of Service Vulnerability (CVSS 8.6)
• CVE-2021-1145 — Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read Vulnerability (CVSS 6.5)
• CVE-2020-3602 — Cisco StarOS Privilege Escalation Vulnerability (CVSS 6.7)
• CVE-2020-3601 — Cisco StarOS Privilege Escalation Vulnerability (CVSS 6.7)
• CVE-2020-3500 — Cisco StarOS IPv6 Denial of Service Vulnerability (CVSS 8.6)
• CVE-2020-3244 — Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability (CVSS 5.3)
• CVE-2019-16026 — Cisco Mobility Management Entity Denial of Service Vulnerability (CVSS 5.9)
• CVE-2019-1869 — Cisco StarOS Denial of Service Vulnerability (CVSS 7.5)
• CVE-2018-0369 — (CVSS 8.6)
• CVE-2018-0273 — (CVSS 5.3)
• CVE-2018-0239 — (CVSS 7.5)
• CVE-2018-0224 — (CVSS 6.7)
• CVE-2018-0122 — (CVSS 4.4)
• CVE-2018-0115 — (CVSS 6.7)
• CVE-2017-6707 — (CVSS 8.2)
• CVE-2017-3865 — (CVSS 5.8)
• CVE-2015-0712 — (CVSS 5.0)
• CVE-2015-0711 — (CVSS 5.0)
• CVE-2013-0149 — (CVSS 5.8)