CVE-2017-6690

A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. More Information: CSCvd73726. Known Affected Releases: 21.0.v0.65839 21.3.M0.67005. Known Fixed Releases: 21.4.A0.67087 21.4.A0.67079 21.4.A0.67013 21.3.M0.67084 21.3.M0.67077 21.3.M0.66994 21.3.J0.66993 21.1.v0.67082 21.1.V0.67083.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_software:21.3.m0.67005:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:30

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/98998 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/98998 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1038634 - () http://www.securitytracker.com/id/1038634 -
References () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-staros - Vendor Advisory () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-staros - Vendor Advisory

Information

Published : 2017-06-13 06:29

Updated : 2024-11-21 03:30


NVD link : CVE-2017-6690

Mitre link : CVE-2017-6690

CVE.ORG link : CVE-2017-6690


JSON object : View

Products Affected

cisco

  • asr_5000
  • asr_5000_software
CWE
CWE-20

Improper Input Validation