Read the docs
TI-2017-04528 Aliases CVE-2017-6774GHSA-q3m2-fp75-5458

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco…

Priority LOW 25CWE-552Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
None · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-552.

Summary

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP subdirectories. An attacker could exploit this vulnerability by overwriting sensitive configuration files through FTP. An exploit could allow the attacker to overwrite configuration files on an affected system. Cisco Bug IDs: CSCvd47739. Known Affected Releases: 21.0.v0.65839.

Why it matters now

EPSS 0.0117 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoStarOS for ASR 5000 Series Aggregated Services Routers21.0.v0.65839—No fix listedCNA
  • StarOS for ASR 5000 Series Aggregated Services Routers VendorCisco Affected 21.0.v0.65839 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:*:*:*:*:*:*:*21.0.v0.65839VulnerableCisco
  • cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:*:*:*:*:*:*:* Versions 21.0.v0.65839 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-6774
  2. 2026-10-03 Alias added: GHSA-q3m2-fp75-5458

References

Advisory 1

  • TI-2017-04484 A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the… CVSS 3.0HIGH 7.5
  • TI-2016-05537 Resource management flaw in Cisco StarOS 18.x through 21.x CVSS 3.0HIGH 7.5
  • TI-2016-01324 The General Packet Radio Switching Tunneling Protocol 1 (aka GTPv1) implementation on… CVSS 3.0HIGH 7.5
  • TI-2016-01340 Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make… CVSS 3.0MEDIUM 6.5
  • TI-2017-04527 Improper input validation in Cisco StarOS for ASR 5000 Series Aggregated Services Routers CVSS 3.0MEDIUM 6.7
  • TI-2015-05325 The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000… CVSS 2.0MEDIUM 5.0
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences