CVE-2017-6775

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The vulnerability is due to incorrect permissions that are given to a set o...

CVE-2017-6774: Files or Directories Accessible to External Parties

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP...

CVE-2017-6775: Undefined Security Weakness

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The vulnerability is due to incorrect permissions that are given to a set o...

PT-2017-17310

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregated Services Routers version 21.0.v0.65839 Description A vulnerability could allow an authenticated, remote attacker to overwrite or modify sensitive system files due to the inclusion of these files within specific...

PT-2017-17311

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregated Services Routers version 21.0.v0.65839 Description A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers could allow an authenticated, local attacker to elevate their privileges to...

PT-2017-17309

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregated Services Routers version 21.0.v0.65839 Description A vulnerability in the CLI could allow an authenticated, local attacker to bypass CLI restrictions and execute commands on the underlying operating system. Thi...

CVE-2017-6773: Improper Input Validation

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to bypass the CLI restrictions and execute commands on the underlying operating system. The vulnerability is due to insufficient...

Cisco StarOS for ASR 5000 Series Routers FTP Configuration File Modification Vulnerability

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP...

Cisco StarOS for ASR 5000 Series Routers Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The vulnerability is due to incorrect permissions that are given to a set o...

CVE-2017-6690

A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. More Information: CSCvd73726. Known Affected...

CVE-2017-6690

The CVE-2017-6690 issue affects Cisco ASR 5000 Series Aggregated Services Routers running Cisco StarOS. Root cause: insufficient input validation in the file check operation. Impact: authenticated, remote attacker could overwrite or modify arbitrary files on an affected system. Affected releases ...

CVE-2017-6690: Improper Input Validation

A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. More Information: CSCvd73726. Known Affected...

PT-2017-17245

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregated Services Routers versions 21.0.v0.65839 through 21.3.M0.67005 Description A vulnerability in the file check operation could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an...

Cisco StarOS Arbitrary File Modification Vulnerability

A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. The vulnerability is due to insufficient input...

Design/Logic Flaw

The Aggregated MAC Protocol Data Unit AMPDU implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service device reload via a crafted AMPDU header, aka Bug ID CSCuz56288...