CVE-2017-6775 - CVE House
Back to Database
Status published Medium CVE-2017-6775

A vulnerability in the CLI of Cisco ASR 5000 Series...

Vulnerability Description

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The vulnerability is due to incorrect permissions that are given to a set of users. An attacker could exploit this vulnerability by logging in to the shell of an affected device and elevating their privileges by modifying environment variables. An exploit could allow the attacker to gain admin-level privileges and take control of the affected device. Cisco Bug IDs: CSCvd47741. Known Affected Releases: 21.0.v0.65839.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-6775

Credits & Attribution

No credits recorded in the NVD database.

References

More from Cisco Systems, Inc.

View All →
CVE-2022-31734
Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc....
Medium 6.1
CVE-2018-3839
An exploitable code execution vulnerability exists in the XCF image...
High 7.5
CVE-2018-3838
An exploitable information vulnerability exists in the XCF image rendering...
Medium 5.3
CVE-2018-3837
An exploitable information disclosure vulnerability exists in the PCX image...
Medium 5.3
CVE-2018-0428
A vulnerability in the account management subsystem of Cisco Web...
Medium 6.7

Affected Vendor

Cisco Systems, Inc.

View all reports →

Affected Software

StarOS for ASR 5000 Series Aggregated Services Routers
Vulnerable Versions:
21.0.v0.65839

Timeline

Official Publish: August 17th, 2017
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.