CVE-2017-6774 - CVE House

Back to Database

Status published Medium CVE-2017-6774

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers...

5 CVSS

Vulnerability Description

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP subdirectories. An attacker could exploit this vulnerability by overwriting sensitive configuration files through FTP. An exploit could allow the attacker to overwrite configuration files on an affected system. Cisco Bug IDs: CSCvd47739. Known Affected Releases: 21.0.v0.65839.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-6774

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Cisco Systems, Inc.

View All →

Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc....

An exploitable code execution vulnerability exists in the XCF image...

An exploitable information vulnerability exists in the XCF image rendering...

An exploitable information disclosure vulnerability exists in the PCX image...

A vulnerability in the account management subsystem of Cisco Web...

Affected Vendor

Cisco Systems, Inc.

View all reports →

Affected Software

StarOS for ASR 5000 Series Aggregated Services Routers

Vulnerable Versions:

21.0.v0.65839

Timeline

Official Publish: August 17th, 2017

Last Modified: September 17th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.