SB2017081701 - Multiple vulnerabilities in Cisco StarOS for ASR 5000 Series Routers
Published: August 17, 2017
Security Bulletin ID
SB2017081701
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
3
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 3 vulnerabilities.
1) Privilege escalation (CVE-ID: CVE-2017-6775)
CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls
CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The weakness exists in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system due to incorrect permissions. A local attacker can log in to the shell of an affected device, modify environment variables and gain admin-level privileges.
Successful exploitation of the vulnerability results in full control over the affected device.
2) Improper access control (CVE-ID: CVE-2017-6774)
CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
The vulnerability allows a remote authenticated attacker to overwrite or modify sensitive system files.
The weakness exists in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system due to the inclusion of sensitive system files within specific FTP subdirectories. A remote authenticated attacker can overwrite sensitive configuration files through FTP and overwrite configuration files on an affected system.
3) Security restrictions bypass (CVE-ID: CVE-2017-6773)
CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls
CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
The vulnerability allows a local attacker to bypass security restrictions on the target system.
The weakness exists in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system due to insufficient sanitization of user-supplied input. A local attacker can bypass the CLI restrictions and execute commands.
Successful exploitation of the vulnerability may result in system compromise.
Remediation
Install update from vendor's website.