PT-2017-17245 · Cisco · Cisco Asr 5000 Series Aggregated Services Routers

Publicado 2017-06-13 · Atualizado 2019-10-03 · CVE-2017-6690

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregated Services Routers versions 21.0.v0.65839 through 21.3.M0.67005

Description A vulnerability in the file check operation could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system.

Recommendations For versions 21.0.v0.65839 through 21.3.M0.67005, update to version 21.4.A0.67087 or later to resolve the issue. For versions 21.0.v0.65839 through 21.3.M0.67005, update to version 21.3.M0.67084 or later as an alternative fix.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-6690

Produtos afetados

Cisco Asr 5000 Series Aggregated Services Routers

Referências · 5

• http://securitytracker.com/id/1038634 · Nota
• http://securityfocus.com/bid/98998 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-staros · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-6690 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6690 · Nota de Segurança