Lucene search

[email protected]NVD:CVE-2017-6690

HistoryJun 13, 2017 - 6:29 a.m.

CVE-2017-6690

2017-06-1306:29:01

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

40.6%

JSON

A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. More Information: CSCvd73726. Known Affected Releases: 21.0.v0.65839 21.3.M0.67005. Known Fixed Releases: 21.4.A0.67087 21.4.A0.67079 21.4.A0.67013 21.3.M0.67084 21.3.M0.67077 21.3.M0.66994 21.3.J0.66993 21.1.v0.67082 21.1.V0.67083.

Affected configurations

Nvd

Node

ciscoasr_5000_softwareMatch21.0.v0.65839

ciscoasr_5000_softwareMatch21.3.m0.67005

AND

ciscoasr_5000Match-

VendorProductVersionCPE
ciscoasr_5000_software21.0.v0.65839cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:*:*:*:*:*:*:*
ciscoasr_5000_software21.3.m0.67005cpe:2.3:a:cisco:asr_5000_software:21.3.m0.67005:*:*:*:*:*:*:*
ciscoasr_5000-cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	asr_5000_software	21.0.v0.65839	cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:::::::*
cisco	asr_5000_software	21.3.m0.67005	cpe:2.3:a:cisco:asr_5000_software:21.3.m0.67005:::::::*
cisco	asr_5000	-	cpe:2.3:h:cisco:asr_5000:-:::::::*

References

www.securityfocus.com/bid/98998

www.securitytracker.com/id/1038634

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-staros

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

40.6%

JSON

Related for NVD:CVE-2017-6690

cvelist1 prion1 cve1 cisco1