What is CVE-2021-1145?

CVE-2021-1145 is a vulnerability in the Secure FTP (SFTP) of Cisco StarOS for Cisco ASR 5000 Series Routers that allows an authenticated, remote attacker to read arbitrary files on an affected device.

How does the CVE-2021-1145 vulnerability affect Cisco StarOS?

The CVE-2021-1145 vulnerability affects Cisco StarOS by allowing an authenticated, remote attacker to read arbitrary files on an affected device.

What is the severity of CVE-2021-1145?

The severity of CVE-2021-1145 is medium with a CVSS score of 6.5.

Is the Cisco ASR 5000 Series vulnerable to CVE-2021-1145?

No, the Cisco ASR 5000 Series is not vulnerable to CVE-2021-1145.

Vulnerability/
CVE-2021-1145

medium

6.5

CWE

59 61

13/1/2021

12/11/2024

CVE-2021-1145: Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read Vulnerability

Q: How can an attacker exploit CVE-2021-1145?

To exploit CVE-2021-1145, the attacker would need to have valid credentials on the affected device.

First published: Wed Jan 13 2021(Updated: )

A vulnerability in the Secure FTP (SFTP) of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an authenticated, remote attacker to read arbitrary files on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials on the affected device. The vulnerability is due to insecure handling of symbolic links. An attacker could exploit this vulnerability by sending a crafted SFTP command to an affected device. A successful exploit could allow the attacker to read arbitrary files on the affected device.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco StarOS	<21.19.7
Cisco ASR 5000
Cisco ASR 5500
Cisco Asr 5700

Never miss a vulnerability like this again

Reference Links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-staros-file-read-L3RDvtey

Frequently Asked Questions

What is CVE-2021-1145?
CVE-2021-1145 is a vulnerability in the Secure FTP (SFTP) of Cisco StarOS for Cisco ASR 5000 Series Routers that allows an authenticated, remote attacker to read arbitrary files on an affected device.
How does the CVE-2021-1145 vulnerability affect Cisco StarOS?
The CVE-2021-1145 vulnerability affects Cisco StarOS by allowing an authenticated, remote attacker to read arbitrary files on an affected device.
What is the severity of CVE-2021-1145?
The severity of CVE-2021-1145 is medium with a CVSS score of 6.5.
How can an attacker exploit CVE-2021-1145?
To exploit CVE-2021-1145, the attacker would need to have valid credentials on the affected device.
Is the Cisco ASR 5000 Series vulnerable to CVE-2021-1145?
No, the Cisco ASR 5000 Series is not vulnerable to CVE-2021-1145.

collector/nvd-index
agent/weakness
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/references
agent/author
agent/title
agent/severity
agent/event
agent/tags
agent/description
agent/first-publish-date
vendor/cisco
canonical/cisco staros
canonical/cisco asr 5000
canonical/cisco asr 5500
canonical/cisco asr 5700

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.