CVE-2017-3865: A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an una...

Security readout for executives and security teams

This flaw affects Cisco StarOS IPsec on ASR 5000 Series Routers and VPC Software. A remote unauthenticated attacker could force all active IPsec VPN tunnels down and block new tunnels, creating a denial-of-service condition. Business impact depends on whether these platforms carry production VPN or mobile core traffic. Exposure is likely limited to organizations operating Cisco ASR 5000 Series Routers or Cisco VPC Software on the listed StarOS 21.1 affected releases, especially where IPsec VPN tunnels are enabled and business-critical. Prioritize remediation where affected Cisco StarOS systems support production VPN, carrier, or customer connectivity. The main risk is service disruption, not data theft, but outage impact could be material. Mitigation focus: Identify ASR 5000 and VPC deployments running Cisco StarOS.; Compare running versions against listed affected and fixed releases.; Upgrade to a Cisco-listed fixed release where applicable..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.