{"api_version":"1","generated_at":"2026-07-23T13:14:12+00:00","cve":"CVE-2017-6707","urls":{"html":"https://cve.report/CVE-2017-6707","api":"https://cve.report/api/cve/CVE-2017-6707.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-6707","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-6707"},"summary":{"title":"CVE-2017-6707","description":"A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Series, and 5700 Series devices and Cisco Virtualized Packet Core (VPC) Software could allow an authenticated, local attacker to break from the StarOS CLI of an affected system and execute arbitrary shell commands as a Linux root user on the system, aka Command Injection. The vulnerability exists because the affected operating system does not sufficiently sanitize commands before inserting them into Linux shell commands. An attacker could exploit this vulnerability by submitting a crafted CLI command for execution in a Linux shell command as a root user. Cisco Bug IDs: CSCvc69329, CSCvc72930.","state":"PUBLISHED","assigner":"cisco","published_at":"2017-07-06 00:29:00","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-78","CWE-78 CWE-78"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"8.2","severity":"HIGH","vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.2","severity":"","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securitytracker.com/id/1038818","name":"http://www.securitytracker.com/id/1038818","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Cisco ASR 5000, 5500, and 5700 Routers StarOS CLI Bug Lets Local Users Obtain Root Privileges - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/99462","name":"http://www.securityfocus.com/bid/99462","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco StarOS CVE-2017-6707 Local Command Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-asrcmd","name":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-asrcmd","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco StarOS CLI Command Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-6707","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6707","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"Cisco StarOS","version":"affected Cisco StarOS","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"11.0_base","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"12.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"12.1_base","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"12.2\\(300\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"12.2_base","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"14.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"14.0\\(600\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"15.0\\(912\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"15.0\\(935\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"15.0\\(938\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"15.0_base","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"16.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"16.0\\(900\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"16.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"16.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"16.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"16.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"16.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"17.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"17.2.0.59184","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"17.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"17.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"17.3_base","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"17.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"18.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"18.0.0.57828","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"18.0.0.59167","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"18.0.0.59211","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"18.0.l0.59219","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"18.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"18.1.0.59776","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"18.1.0.59780","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"18.1_base","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"18.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"18.3_base","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"18.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"19.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"19.0.m0.60737","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"19.0.m0.60828","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"19.0.m0.61045","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"19.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"19.1.0.61559","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"19.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"19.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"20.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"20.0.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"20.0.1.a0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"20.0.1.v0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"20.0.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"20.0.2.3.65026","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"20.0.2.v1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"20.0.m0.62842","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"20.0.m0.63229","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"20.0.v0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"21.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"21.0_base","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"21.0_m0.64246","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"6707","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"staros","cpe6":"21.0_m0.64702","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T15:41:17.086Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1038818","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1038818"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-asrcmd"},{"name":"99462","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/99462"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"Cisco StarOS","vendor":"n/a","versions":[{"status":"affected","version":"Cisco StarOS"}]}],"datePublic":"2017-07-05T00:00:00.000Z","descriptions":[{"lang":"en","value":"A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Series, and 5700 Series devices and Cisco Virtualized Packet Core (VPC) Software could allow an authenticated, local attacker to break from the StarOS CLI of an affected system and execute arbitrary shell commands as a Linux root user on the system, aka Command Injection. The vulnerability exists because the affected operating system does not sufficiently sanitize commands before inserting them into Linux shell commands. An attacker could exploit this vulnerability by submitting a crafted CLI command for execution in a Linux shell command as a root user. Cisco Bug IDs: CSCvc69329, CSCvc72930."}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"CWE-78","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2017-07-07T09:57:01.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"1038818","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1038818"},{"tags":["x_refsource_CONFIRM"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-asrcmd"},{"name":"99462","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/99462"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2017-6707","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Cisco StarOS","version":{"version_data":[{"version_value":"Cisco StarOS"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Series, and 5700 Series devices and Cisco Virtualized Packet Core (VPC) Software could allow an authenticated, local attacker to break from the StarOS CLI of an affected system and execute arbitrary shell commands as a Linux root user on the system, aka Command Injection. The vulnerability exists because the affected operating system does not sufficiently sanitize commands before inserting them into Linux shell commands. An attacker could exploit this vulnerability by submitting a crafted CLI command for execution in a Linux shell command as a root user. Cisco Bug IDs: CSCvc69329, CSCvc72930."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-78"}]}]},"references":{"reference_data":[{"name":"1038818","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1038818"},{"name":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-asrcmd","refsource":"CONFIRM","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-asrcmd"},{"name":"99462","refsource":"BID","url":"http://www.securityfocus.com/bid/99462"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2017-6707","datePublished":"2017-07-06T00:00:00.000Z","dateReserved":"2017-03-09T00:00:00.000Z","dateUpdated":"2024-08-05T15:41:17.086Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-07-06 00:29:00","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-78","CWE-78 CWE-78"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:11.0_base:*:*:*:*:*:*:*","matchCriteriaId":"C454137D-16DF-4AC2-A713-F7063E898939"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"03EED3DD-496A-48CF-8AF0-5E30DAA6314F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:12.1_base:*:*:*:*:*:*:*","matchCriteriaId":"DA9417F3-7D70-4484-9B93-19C28C38F51B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:12.2\\(300\\):*:*:*:*:*:*:*","matchCriteriaId":"02D2589B-FC06-47BB-B545-95424C052E93"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:12.2_base:*:*:*:*:*:*:*","matchCriteriaId":"831BFC89-3876-4F6F-A926-C29C13A6D9B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:14.0\\(600\\):*:*:*:*:*:*:*","matchCriteriaId":"DAFE6257-0118-430B-9856-55B745FCF9D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:14.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FD8633C3-7092-4793-AE4B-CB537DE514DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:15.0\\(912\\):*:*:*:*:*:*:*","matchCriteriaId":"EF86D7C7-353B-4BC7-9F18-D00C7F2E695C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:15.0\\(935\\):*:*:*:*:*:*:*","matchCriteriaId":"FD1C51B9-163D-440A-8B14-2B0D6F437CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:15.0\\(938\\):*:*:*:*:*:*:*","matchCriteriaId":"C2300C8D-AA18-45CA-9EC0-EB4659385863"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:15.0_base:*:*:*:*:*:*:*","matchCriteriaId":"5289C275-E80F-4776-8871-4873634C1E2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:16.0\\(900\\):*:*:*:*:*:*:*","matchCriteriaId":"A8043AB1-636A-47AB-9B5A-D1FC6D286D52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:16.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B3A3FBBB-BF06-4F27-9AFA-0F57C6343865"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:16.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D2E4C7F-0A9E-4B0C-B248-966155B56B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:16.1.1:*:*:*:*:*:*:*","matchCriteriaId":"48C130CD-A00A-4FDC-B6AA-E6C3E3532ED8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:16.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5A1E3EE9-06ED-46B6-8576-B9F5CCF8C5F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:16.5.0:*:*:*:*:*:*:*","matchCriteriaId":"BD80771F-7650-4DAF-B9FD-AE978C43736F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:16.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D15F6CD4-C821-4957-B65E-5E2A771D929C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:17.2.0:*:*:*:*:*:*:*","matchCriteriaId":"04145290-816F-4A19-8739-396CBD786D7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:17.2.0.59184:*:*:*:*:*:*:*","matchCriteriaId":"9F7E4AEE-94AF-45E2-BCD3-0CB156A0EC97"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:17.3.0:*:*:*:*:*:*:*","matchCriteriaId":"12C68829-4B5B-4B0F-BA9D-4D6A26B92A7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:17.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FF8967E4-D278-4A38-900F-BE64F5088989"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:17.3_base:*:*:*:*:*:*:*","matchCriteriaId":"A8823E83-1EAC-4ED0-8B1C-369152040E98"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:17.7.0:*:*:*:*:*:*:*","matchCriteriaId":"47F532C0-1054-4470-B788-58E84CD5781A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:18.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E044CCC9-D15F-4674-BEC9-832988EFEB7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:18.0.0.57828:*:*:*:*:*:*:*","matchCriteriaId":"E7311CD2-6668-4254-BF40-99A36ECDD48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:18.0.0.59167:*:*:*:*:*:*:*","matchCriteriaId":"B7C1A510-800B-4F0F-8483-B485C6CFD3CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:18.0.0.59211:*:*:*:*:*:*:*","matchCriteriaId":"80218968-C095-4830-B9A7-67BB6FFAE4BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:18.0.l0.59219:*:*:*:*:*:*:*","matchCriteriaId":"BD9B9641-D25B-41D2-8AC4-9FDDC5B82D25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:18.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FE0014BF-BFFB-409C-B9A5-193C5039FE21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:18.1.0.59776:*:*:*:*:*:*:*","matchCriteriaId":"13AB3F1A-84F3-43A3-882D-7EE3DBADDFBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:18.1.0.59780:*:*:*:*:*:*:*","matchCriteriaId":"C97857CC-40AB-48A2-A39E-27E075BC6DB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:18.1_base:*:*:*:*:*:*:*","matchCriteriaId":"2C5BBA4D-F4BF-4849-8387-74EBD17AC30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:18.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BD68E907-280D-42A1-8215-ECB2DA7286FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:18.3_base:*:*:*:*:*:*:*","matchCriteriaId":"FCF8900C-FD6D-48FA-90EE-77E46DF31B32"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:18.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6A156E7C-C4FC-4166-9806-537A2F2B0514"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:19.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C5BB9185-2E79-4A78-A5DE-D77F5CD2CFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:19.0.m0.60737:*:*:*:*:*:*:*","matchCriteriaId":"A2F4FDEC-551A-4A6A-90B2-0838305E28F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:19.0.m0.60828:*:*:*:*:*:*:*","matchCriteriaId":"48B94C0A-A9D4-4EC6-B063-C4292975F855"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:19.0.m0.61045:*:*:*:*:*:*:*","matchCriteriaId":"857DAEB3-BE28-48DD-9D3F-55E47BC05B3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:19.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8E92EEAD-E9D0-407C-BC4E-F64C8F015414"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:19.1.0.61559:*:*:*:*:*:*:*","matchCriteriaId":"3C968950-13F7-4671-B1EA-922951760B62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:19.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4EF8ED69-D9ED-4E9B-831C-803E1A94A41F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:19.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6602B9A6-C35F-4E50-9CD5-E0135962694A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:20.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F5173B19-BCD1-419E-9335-AEA1F05CBA66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:20.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CE3A11B0-CC34-4F64-B4D7-DB45A5E92B4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:20.0.1.a0:*:*:*:*:*:*:*","matchCriteriaId":"4ED29CFC-A64B-49FF-ABEA-487BA88C880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:20.0.1.v0:*:*:*:*:*:*:*","matchCriteriaId":"47D8753E-45EE-484F-B7B0-44FA608EC742"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:20.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8F215052-EA0B-4646-B993-4F30487BB45E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:20.0.2.3.65026:*:*:*:*:*:*:*","matchCriteriaId":"D8141015-B85E-45D7-9DA0-BF29D8FB01ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:20.0.2.v1:*:*:*:*:*:*:*","matchCriteriaId":"17DFC8AE-3448-4F6D-BFD7-F1A2055F375E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:20.0.m0.62842:*:*:*:*:*:*:*","matchCriteriaId":"B9E697D7-05C0-4BE0-B64B-06DBF0B4083F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:20.0.m0.63229:*:*:*:*:*:*:*","matchCriteriaId":"DECCE42E-EF83-4A2D-83BE-59C8902E3F50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:20.0.v0:*:*:*:*:*:*:*","matchCriteriaId":"F2379CED-D0DC-491B-BA03-863A9E1811D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:21.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D7931FEA-534C-4556-A41F-261A9B25CDB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:21.0_base:*:*:*:*:*:*:*","matchCriteriaId":"A827B2AE-0DB8-4857-A438-D5DFDF2828E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:21.0_m0.64246:*:*:*:*:*:*:*","matchCriteriaId":"23BF3FCD-3A29-4939-871D-C83CC4C9F85D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:staros:21.0_m0.64702:*:*:*:*:*:*:*","matchCriteriaId":"A749454D-894D-4A57-99A1-6DC9055367BB"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"6707","Ordinal":"1","Title":"CVE-2017-6707","CVE":"CVE-2017-6707","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"6707","Ordinal":"1","NoteData":"A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Series, and 5700 Series devices and Cisco Virtualized Packet Core (VPC) Software could allow an authenticated, local attacker to break from the StarOS CLI of an affected system and execute arbitrary shell commands as a Linux root user on the system, aka Command Injection. The vulnerability exists because the affected operating system does not sufficiently sanitize commands before inserting them into Linux shell commands. An attacker could exploit this vulnerability by submitting a crafted CLI command for execution in a Linux shell command as a root user. Cisco Bug IDs: CSCvc69329, CSCvc72930.","Type":"Description","Title":"CVE-2017-6707"},{"CveYear":"2017","CveId":"6707","Ordinal":"2","NoteData":"2017-07-05","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"6707","Ordinal":"3","NoteData":"2017-07-07","Type":"Other","Title":"Modified"}]}}}