CVE-2017-6774: Medium severity cisco asr 5000 series routers vulnerability
A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP subdirectories. An attacker could exploit this vulnerability by overwriting sensitive configuration files through FTP. An exploit could allow the attacker to overwrite configuration files on an affected system. Cisco Bug IDs: CSCvd47739. Known Affected Releases: 21.0.v0.65839.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6774?
CVE-2017-6774 has a high severity rating due to its potential to allow authenticated attackers to modify sensitive system files.
How do I fix CVE-2017-6774?
To fix CVE-2017-6774, update the Cisco ASR 5000 Series Aggregated Services Routers to the latest version of Cisco StarOS that addresses this vulnerability.
Who is affected by CVE-2017-6774?
CVE-2017-6774 affects Cisco ASR 5000 Series Aggregated Services Routers running the specific version of Cisco StarOS 21.0.v0.65839.
What type of attack is associated with CVE-2017-6774?
CVE-2017-6774 is associated with remote authenticated attacks that could lead to overwriting or modifying sensitive system files.
What are the potential consequences of CVE-2017-6774?
The potential consequences of CVE-2017-6774 include unauthorized access to modify configuration files, leading to system instability or data breaches.