CVE-2015-0712: The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows...

Security readout for executives and security teams

This issue can let a remote attacker crash or reload the session-manager service on affected Cisco ASR 5000 systems, causing packet loss. For service-provider or mobile-core environments, the main risk is availability disruption, not data theft. Exposure is likely limited to organizations operating Cisco ASR 5000 devices on the listed StarOS versions, especially where the affected HTTP packet processing path is reachable from untrusted networks. Treat this as an availability risk for critical network infrastructure. Prioritize confirmation and vendor-guided remediation if ASR 5000 systems remain in production on affected StarOS versions. Mitigation focus: Inventory Cisco ASR 5000 devices and confirm StarOS versions.; Check Cisco advisory alertId 38580 for fixed releases or workarounds.; Prioritize remediation where packet loss would affect customer-facing services..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.