CVEvulnerability

CVE-2017-6774

5.0 MEDIUM Published 2017-08-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.0 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-552

Description

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP subdirectories. An attacker could exploit this vulnerability by overwriting sensitive configuration files through FTP. An exploit could allow the attacker to overwrite configuration files on an affected system. Cisco Bug IDs: CSCvd47739. Known Affected Releases: 21.0.v0.65839.

Affected configurations

• cisco asr 5000 software 21.0.v0.65839

Related

Weakness · CWE (1)

  • CWE-552 Files or Directories Accessible to External Parties weakness

References