CWE
552
Advisory Published
Updated

CVE-2017-6774

First published: Thu Aug 17 2017(Updated: )

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP subdirectories. An attacker could exploit this vulnerability by overwriting sensitive configuration files through FTP. An exploit could allow the attacker to overwrite configuration files on an affected system. Cisco Bug IDs: CSCvd47739. Known Affected Releases: 21.0.v0.65839.

Credit: ykramarz@cisco.com

Affected SoftwareAffected VersionHow to fix
Cisco ASR 5000 Software=21.0.v0.65839

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2017-6774?

    CVE-2017-6774 has a high severity rating due to its potential to allow authenticated attackers to modify sensitive system files.

  • How do I fix CVE-2017-6774?

    To fix CVE-2017-6774, update the Cisco ASR 5000 Series Aggregated Services Routers to the latest version of Cisco StarOS that addresses this vulnerability.

  • Who is affected by CVE-2017-6774?

    CVE-2017-6774 affects Cisco ASR 5000 Series Aggregated Services Routers running the specific version of Cisco StarOS 21.0.v0.65839.

  • What type of attack is associated with CVE-2017-6774?

    CVE-2017-6774 is associated with remote authenticated attacks that could lead to overwriting or modifying sensitive system files.

  • What are the potential consequences of CVE-2017-6774?

    The potential consequences of CVE-2017-6774 include unauthorized access to modify configuration files, leading to system instability or data breaches.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203