CVE-2017-6690: Input Validation
First published: Tue Jun 13 2017(Updated: )
A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. More Information: CSCvd73726. Known Affected Releases: 21.0.v0.65839 21.3.M0.67005. Known Fixed Releases: 21.4.A0.67087 21.4.A0.67079 21.4.A0.67013 21.3.M0.67084 21.3.M0.67077 21.3.M0.66994 21.3.J0.66993 21.1.v0.67082 21.1.V0.67083.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco ASR 5000 Series Routers | =21.0.v0.65839 | |
| Cisco ASR 5000 Series Routers | =21.3.m0.67005 | |
| Cisco ASR 5000 firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-6690?
CVE-2017-6690 has a critical severity rating due to its potential to allow unauthorized file modifications by authenticated remote attackers.
How do I fix CVE-2017-6690?
To fix CVE-2017-6690, users should update the Cisco ASR 5000 Series Aggregated Services Router to the patched version provided by Cisco.
Who is affected by CVE-2017-6690?
CVE-2017-6690 affects users running specific versions of the Cisco ASR 5000 Software, including 21.0.v0.65839 and 21.3.m0.67005.
What are the potential impacts of CVE-2017-6690?
The potential impacts of CVE-2017-6690 include unauthorized file access and modifications, which can compromise the integrity of the affected systems.
Is authentication required to exploit CVE-2017-6690?
Yes, exploitation of CVE-2017-6690 requires authentication, allowing remote attackers who have access to the system to perform actions.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/severity
- agent/first-publish-date
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco asr 5000 series routers
- version/cisco asr 5000 series routers/21.0.v0.65839
- version/cisco asr 5000 series routers/21.3.m0.67005
- canonical/cisco asr 5000 firmware