PT-2017-17309

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregated Services Routers version 21.0.v0.65839 Description A vulnerability in the CLI could allow an authenticated, local attacker to bypass CLI restrictions and execute commands on the underlying operating system. Thi...

PT-2017-17310

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregated Services Routers version 21.0.v0.65839 Description A vulnerability could allow an authenticated, remote attacker to overwrite or modify sensitive system files due to the inclusion of these files within specific...

PT-2017-17311

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregated Services Routers version 21.0.v0.65839 Description A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers could allow an authenticated, local attacker to elevate their privileges to...

CVE-2017-6775: Undefined Security Weakness

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The vulnerability is due to incorrect permissions that are given to a set o...

CVE-2017-6774: Files or Directories Accessible to External Parties

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP...

CVE-2017-6773: Improper Input Validation

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to bypass the CLI restrictions and execute commands on the underlying operating system. The vulnerability is due to insufficient...

Cisco StarOS for ASR 5000 Series Routers Command-Line Interface Security Bypass Vulnerability

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to bypass the CLI restrictions and execute commands on the underlying operating system. The vulnerability is due to insufficient...

Cisco StarOS for ASR 5000 Series Routers Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The vulnerability is due to incorrect permissions that are given to a set o...

Cisco StarOS for ASR 5000 Series Routers FTP Configuration File Modification Vulnerability

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP...

CVE-2017-6672

A vulnerability in certain filtering mechanisms of access control lists ACLs for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022...

Design/Logic Flaw

A vulnerability in certain filtering mechanisms of access control lists ACLs for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022...

CVE-2017-6672

A vulnerability in certain filtering mechanisms of access control lists ACLs for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022...

CVE-2017-6612

A vulnerability in the gateway GPRS support node GGSN of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauthenticated, remote attacker to redirect HTTP traffic sent to an affected device. More Information: CSCvc67927...

CVE-2017-6612

A vulnerability in the gateway GPRS support node GGSN of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauthenticated, remote attacker to redirect HTTP traffic sent to an affected device. More Information: CSCvc67927...

CVE-2017-6672

A vulnerability in certain filtering mechanisms of access control lists ACLs for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022...

CVE-2017-6612

Cisco’s advisory (Cisco ASR 5000 Series GGSN Gateway Redirect Vulnerability) details a GGSN-related flaw in Cisco ASR 5000 routers that allows an unauthenticated, remote attacker to redirect HTTP traffic by manipulating HTTP payload properties. Affected are ASR 5000 Series devices running 17.3.9....

CVE-2017-6672

Cisco ASR 5000 Series Aggregation Services Routers are affected by an ACL filtering bypass vulnerability. The issue stems from certain ACL rule filtering not inspecting and matching specific traffic, allowing an unauthenticated, remote attacker to bypass configured ACL rules. Affected devices can...

PT-2017-17183

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregation Services Routers versions 17.3.9.62033 through 21.1.2 Description A vulnerability in the gateway GPRS support node GGSN could allow an unauthenticated, remote attacker to redirect HTTP traffic sent to an...

PT-2017-17233

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregation Services Routers versions prior to 22.x Description A vulnerability in certain filtering mechanisms of access control lists ACLs could allow an unauthenticated, remote attacker to bypass ACL rules that have be...

CVE-2017-6672: Incorrect Authorization

A vulnerability in certain filtering mechanisms of access control lists ACLs for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022...