PT-2017-17310 · Cisco · Cisco Asr 5000 Series Aggregated Services Routers

Publicado 2017-08-17 · Atualizado 2019-10-03 · CVE-2017-6774

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregated Services Routers version 21.0.v0.65839

Description A vulnerability could allow an authenticated, remote attacker to overwrite or modify sensitive system files due to the inclusion of these files within specific FTP subdirectories. An attacker could exploit this by overwriting sensitive configuration files through FTP, potentially allowing them to modify configuration files on an affected system.

Recommendations For version 21.0.v0.65839, consider restricting FTP access to sensitive system files as a temporary workaround until a patch is available. Restrict access to the FTP subdirectories containing sensitive system files to minimize the risk of exploitation.

Correção

Files Accessible to External Parties

Enumeração de Fraquezas

CWE-552

Identificadores relacionados

CVE-2017-6774

Produtos afetados

Cisco Asr 5000 Series Aggregated Services Routers

Referências · 5

• http://securityfocus.com/bid/100386 · Nota
• https://osv.dev/vulnerability/CVE-2017-6774 · Aviso do Fabricante
• http://securitytracker.com/id/1039182 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6774 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros2 · Aviso do Fabricante