PT-2017-17245 · Cisco · Cisco Asr 5000 Series Aggregated Services Routers

Published 2017-06-13 · Updated 2019-10-03 · CVE-2017-6690

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregated Services Routers versions 21.0.v0.65839 through 21.3.M0.67005

Description A vulnerability in the file check operation could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system.

Recommendations For versions 21.0.v0.65839 through 21.3.M0.67005, update to version 21.4.A0.67087 or later to resolve the issue. For versions 21.0.v0.65839 through 21.3.M0.67005, update to version 21.3.M0.67084 or later as an alternative fix.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-6690

Affected Products

Cisco Asr 5000 Series Aggregated Services Routers

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-staros · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-6690 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6690 · Security Note
• http://securitytracker.com/id/1038634 · Note
• http://securityfocus.com/bid/98998 · Note