Read the docs
TI-2017-04527 Aliases CVE-2017-6773GHSA-ppp2-xhm6-jw52

Improper input validation in Cisco StarOS for ASR 5000 Series Aggregated Services Routers

Priority LOW 30CWE-20Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to bypass the CLI restrictions and execute commands on the underlying operating system. The vulnerability is due to insufficient input sanitization of user-supplied input at the CLI. An attacker could exploit this vulnerability by crafting a script on the device that will allow them to bypass built-in restrictions. An exploit could allow the unauthorized user to launch the CLI directly from a command shell. Cisco Bug IDs: CSCvd47722. Known Affected Releases: 21.0.v0.65839.

Why it matters now

EPSS 0.00421 36th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoStarOS for ASR 5000 Series Aggregated Services Routers21.0.v0.65839—No fix listedCNA
  • StarOS for ASR 5000 Series Aggregated Services Routers VendorCisco Affected 21.0.v0.65839 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:*:*:*:*:*:*:*21.0.v0.65839VulnerableCisco
  • cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:*:*:*:*:*:*:* Versions 21.0.v0.65839 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-6773
  2. 2026-10-03 Alias added: GHSA-ppp2-xhm6-jw52

References

Advisory 1

  • TI-2017-04484 A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the… CVSS 3.0HIGH 7.5
  • TI-2016-05537 Resource management flaw in Cisco StarOS 18.x through 21.x CVSS 3.0HIGH 7.5
  • TI-2016-01324 The General Packet Radio Switching Tunneling Protocol 1 (aka GTPv1) implementation on… CVSS 3.0HIGH 7.5
  • TI-2016-01340 Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make… CVSS 3.0MEDIUM 6.5
  • TI-2015-05325 The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000… CVSS 2.0MEDIUM 5.0
  • TI-2015-05321 Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote… CVSS 2.0MEDIUM 5.0
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences