CVE-2017-6774 | BDVDB-2026-89195 Detail

CiscoStarOS for ASR 5000 Series Aggregated Services Routers

Description#

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP subdirectories. An attacker could exploit this vulnerability by overwriting sensitive configuration files through FTP. An exploit could allow the attacker to overwrite configuration files on an affected system. Cisco Bug IDs: CSCvd47739. Known Affected Releases: 21.0.v0.65839.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros2
http://www.securityfocus.com/bid/100386
http://www.securitytracker.com/id/1039182

Exploit#

No public exploit known

History#

Version 12017-08-17Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.