PT-2017-17311 · Cisco · Cisco Asr 5000 Series Aggregated Services Routers

Published 2017-08-17 · Updated 2019-10-03 · CVE-2017-6775

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregated Services Routers version 21.0.v0.65839

Description A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The issue is due to incorrect permissions given to a set of users. An attacker could exploit this by logging in to the shell of an affected device and modifying environment variables to gain admin-level privileges, potentially taking control of the device.

Recommendations For version 21.0.v0.65839, update the system to a version that includes the fix for Cisco Bug ID CSCvd47741 to prevent privilege escalation. As a temporary workaround, consider restricting access to the shell of affected devices to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2017-6775

Affected Products

Cisco Asr 5000 Series Aggregated Services Routers

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-6775 · Security Note
• https://osv.dev/vulnerability/CVE-2017-6775 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros3 · Vendor Advisory
• http://securitytracker.com/id/1039183 · Note
• http://securityfocus.com/bid/100381 · Note