First published: Thu Aug 17 2017(Updated: )
A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP subdirectories. An attacker could exploit this vulnerability by overwriting sensitive configuration files through FTP. An exploit could allow the attacker to overwrite configuration files on an affected system. Cisco Bug IDs: CSCvd47739. Known Affected Releases: 21.0.v0.65839.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco ASR 5000 Software | =21.0.v0.65839 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-6774 has a high severity rating due to its potential to allow authenticated attackers to modify sensitive system files.
To fix CVE-2017-6774, update the Cisco ASR 5000 Series Aggregated Services Routers to the latest version of Cisco StarOS that addresses this vulnerability.
CVE-2017-6774 affects Cisco ASR 5000 Series Aggregated Services Routers running the specific version of Cisco StarOS 21.0.v0.65839.
CVE-2017-6774 is associated with remote authenticated attacks that could lead to overwriting or modifying sensitive system files.
The potential consequences of CVE-2017-6774 include unauthorized access to modify configuration files, leading to system instability or data breaches.