Read the docs
TI-2017-04529 Aliases CVE-2017-6775GHSA-8pcf-jvr6-35m9

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running…

Priority LOW 26Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to elevate their privileges to admin-level privileges. The vulnerability is due to incorrect permissions that are given to a set of users. An attacker could exploit this vulnerability by logging in to the shell of an affected device and elevating their privileges by modifying environment variables. An exploit could allow the attacker to gain admin-level privileges and take control of the affected device. Cisco Bug IDs: CSCvd47741. Known Affected Releases: 21.0.v0.65839.

Why it matters now

EPSS 0.00345 28th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoStarOS for ASR 5000 Series Aggregated Services Routers21.0.v0.65839—No fix listedCNA
  • StarOS for ASR 5000 Series Aggregated Services Routers VendorCisco Affected 21.0.v0.65839 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:*:*:*:*:*:*:*21.0.v0.65839VulnerableCisco
  • cpe:2.3:a:cisco:asr_5000_software:21.0.v0.65839:*:*:*:*:*:*:* Versions 21.0.v0.65839 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-6775
  2. 2026-10-03 Alias added: GHSA-8pcf-jvr6-35m9

References

Advisory 1

  • TI-2017-04484 A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the… CVSS 3.0HIGH 7.5
  • TI-2016-05537 Resource management flaw in Cisco StarOS 18.x through 21.x CVSS 3.0HIGH 7.5
  • TI-2016-01324 The General Packet Radio Switching Tunneling Protocol 1 (aka GTPv1) implementation on… CVSS 3.0HIGH 7.5
  • TI-2016-01340 Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make… CVSS 3.0MEDIUM 6.5
  • TI-2017-04527 Improper input validation in Cisco StarOS for ASR 5000 Series Aggregated Services Routers CVSS 3.0MEDIUM 6.7
  • TI-2015-05325 The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000… CVSS 2.0MEDIUM 5.0
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences