https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:44:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-02354 bdu:2023-02354 https://cve.radiocsirt.org/vuln/bdu:2023-02354 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0327 certfr-2023-avi-0327 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0327 https://cve.radiocsirt.org/vuln/cisco-sa-staros-ssh-privesc-bmwejc3h <p>A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied credentials. An attacker could exploit this vulnerability by sending a valid low-privileged SSH key to an affected device from a host that has an IP address that is configured as the source for a high-privileged user account. A successful exploit could allow the attacker to log in to the affected device through SSH as a high-privileged user. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.</p> <p>A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied credentials. An attacker could exploit this vulnerability by sending a valid low-privileged SSH key to an affected device from a host that has an IP address that is configured as the source for a high-privileged user account. A successful exploit could allow the attacker to log in to the affected device through SSH as a high-privileged user. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-staros-ssh-privesc-bmwejc3h https://cve.radiocsirt.org/vuln/cnvd-2023-62940 cnvd-2023-62940 https://cve.radiocsirt.org/vuln/cnvd-2023-62940 https://cve.radiocsirt.org/vuln/euvd-2026-7924 EUVD-2026-7924 https://cve.radiocsirt.org/vuln/euvd-2026-7924 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20046 <p>A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied credentials. An attacker could exploit this vulnerability by sending a valid low-privileged SSH key to an affected device from a host that has an IP address that is configured as the source for a high-privileged user account. A successful exploit could allow the attacker to log in to the affected device through SSH as a high-privileged user. There are workarounds that address this vulnerability.</p> <p>A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied credentials. An attacker could exploit this vulnerability by sending a valid low-privileged SSH key to an affected device from a host that has an IP address that is configured as the source for a high-privileged user account. A successful exploit could allow the attacker to log in to the affected device through SSH as a high-privileged user. There are workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-20046 https://cve.radiocsirt.org/vuln/gsd-2023-20046 gsd-2023-20046 https://cve.radiocsirt.org/vuln/gsd-2023-20046