CVE-2017-6775

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The vulnerability is due to incorrect permissions that are given to a set of users. An attacker could exploit this vulnerability by logging in to the shell of an affected device and elevating their privileges by modifying environment variables. An exploit could allow the attacker to gain admin-level privileges and take control of the affected device. Cisco Bug IDs: CSCvd47741. Known Affected Releases: 21.0.v0.65839.

Metrics

CVSS 3.0 5.7/10CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Affected software

Vendor	Product	Versions
Cisco Systems, Inc.	StarOS for ASR 5000 Series Aggregated Services Routers	21.0.v0.65839

References

http://www.securityfocus.com/bid/100381Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039183Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros3Vendor Advisory
http://www.securityfocus.com/bid/100381Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039183Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-staros3Vendor Advisory

Timeline

Published: Aug 17, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-67766.1A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to conduct a CVE-2017-67774.9A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to acquire CVE-2017-67786.5A vulnerability in the Elastic Services Controller (ESC) web interface of the Cisco Ultra Services Platform could allow an authenticated, re CVE-2017-67797.5Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration product CVE-2017-67807.5A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker CVE-2017-67815.3A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticat CVE-2017-67825.4A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify a CVE-2017-67834.3A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management CVE-2017-67845.3A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remo CVE-2017-67854.3A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, CVE-2017-67866.3A vulnerability in Cisco Elastic Services Controller could allow an authenticated, local, unprivileged attacker to access sensitive informat CVE-2017-67886.1The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated