Vulnerability in Cisco Asr_5000_software
CVE-2017-6775
A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The vulnerability…
EPSS: 0.001 (15.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L.
Affected products
- Cisco Asr_5000_software — versions 21.0.v0.65839
- Cisco Systems, Inc. Staros For Asr 5000 Series Aggregated Services Routers — versions 21.0.v0.65839
References
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2017-6775?
- CVE-2017-6775 is a medium-severity vulnerability in Cisco Asr_5000_software. CVSS score: 5.7/10. Published 2017-08-17.
- How severe is CVE-2017-6775?
- Medium severity. CVSS v3 base score is 5.7 out of 10.