Cisco StarOS for ASR 5000 Series Routers CVE-2017-6774 Arbitrary File Write Vulnerability

Bugtraq ID:	100386
Class:	Unknown
CVE:	CVE-2017-6774
Remote:	Yes
Local:	No
Published:	Aug 16 2017 12:00AM
Updated:	Aug 16 2017 12:00AM
Credit:	Cisco.
Vulnerable:	Cisco StarOS 0 Cisco ASR 5000 Series 21.0.v0.65839
Not Vulnerable:

Cisco StarOS for ASR 5000 Series Routers CVE-2017-6774 Arbitrary File Write Vulnerability

Cisco StarOS for ASR 5000 Series Routers is prone to a security vulnerability that allows remote attackers to write arbitrary files.

Successful exploits may allow an attacker to overwrite configuration files on an affected system. This may aid in further attacks.

This issue is being tracked by Cisco Bug ID CSCvd47739.

Cisco StarOS for ASR 5000 Series Routers CVE-2017-6774 Arbitrary File Write Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco StarOS for ASR 5000 Series Routers CVE-2017-6774 Arbitrary File Write Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco StarOS for ASR 5000 Series Routers CVE-2017-6774 Arbitrary File Write Vulnerability

References:

• Cisco Homepage (Cisco)
  
• cisco-sa-20170816-staros2: Cisco StarOS for ASR 5000 Series Routers FTP Configur (Cisco)