A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an…

Description

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP subdirectories. An attacker could exploit this vulnerability by overwriting sensitive configuration files through FTP. An exploit could allow the attacker to overwrite configuration files on an affected system. Cisco Bug IDs: CSCvd47739. Known Affected Releases: 21.0.v0.65839.

Scores

EPSS (exploitation in 30 days)

1.2% · top 33% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.0.

Weakness

• File Modification
• CWE-552 (opens in a new tab)Other CVEs with CWE-552

Affected products

• Cisco Systems, Inc. · StarOS for ASR 5000 Series Aggregated Services Routers

  • affected 21.0.v0.65839

References (3)

• 20170816 Cisco StarOS for ASR 5000 Series Routers FTP Configuration File Modification Vulnerability (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
• 100386 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 1039182 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2017-6774](https://trackcve.app/badge/CVE-2017-6774.svg)](https://trackcve.app/cve/CVE-2017-6774)

Record last updated 17 Sept 2024, 03:49 UTC.