CVE-2017-6775: cisco systems, inc. staros for asr 5000 series aggregated services routers
Vulnerability summary
CVE-2017-6775 is a medium (CVSS 5.7) vulnerability in cisco systems, inc. staros for asr 5000 series aggregated services routers. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 26.6% of scored vulnerabilities.
Timeline
- 17-08-2017PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The vulnerability is due to incorrect permissions that are given to a set of users. An attacker could exploit this vulnerability by logging in to the shell of an affected device and elevating their privileges by modifying environment variables. An exploit could allow the attacker to gain admin-level privileges and take control of the affected device. Cisco Bug IDs: CSCvd47741. Known Affected Releases: 21.0.v0.65839.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.34%
Chance of exploitation in the next 30 days
Percentile
27%
Versus all other CVEs
30-day change
0.00 pp
From 0.34% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Cisco1 product
- asr_5000_software21.0.v0.65839
Cisco systems, inc.1 product
2 vendors · 2 products
References
3 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros3Vendor AdvisoryX Refsource CISCO