cnvd - cnvd-2017-32524

cnvd-2017-32524

Vulnerability from cnvd

Title: Cisco IOS XE Software任意文件覆盖漏洞

Description:

Cisco ASR 920 Series Aggregation Services Routers是美国思科（Cisco）公司的ASR 920系列多功能路由器。Cisco IOS XE Software是其中的一套网络设备专用的操作系统。

Cisco ASR 920 Series Aggregation Services Routers中的IOS XE Software的USB-modem代码存在安全漏洞，该漏洞源于程序未能正确的验证输入。本地攻击者可利用该漏洞覆盖底层操作系统上的任意文件。

Severity: 中

Patch Name: Cisco IOS XE Software任意文件覆盖漏洞的补丁

Patch Description:

Cisco ASR 920 Series Aggregation Services Routers是美国思科（Cisco）公司的ASR 920系列多功能路由器。Cisco IOS XE Software是其中的一套网络设备专用的操作系统。

Cisco ASR 920 Series Aggregation Services Routers中的IOS XE Software的USB-modem代码存在安全漏洞，该漏洞源于程序未能正确的验证输入。本地攻击者可利用该漏洞覆盖底层操作系统上的任意文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-2

Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-6795 http://www.securityfocus.com/bid/100656

Impacted products

Name
['Cisco IOS XE Software 0', 'Cisco ASR 920 Series Aggregation Services Router Fuji-16.8.1', 'Cisco ASR 920 Series Aggregation Services Router 15.6(2)S']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "100656"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-6795"
    }
  },
  "description": "Cisco ASR 920 Series Aggregation Services Routers\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684ASR 920\u7cfb\u5217\u591a\u529f\u80fd\u8def\u7531\u5668\u3002Cisco IOS XE Software\u662f\u5176\u4e2d\u7684\u4e00\u5957\u7f51\u7edc\u8bbe\u5907\u4e13\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nCisco ASR 920 Series Aggregation Services Routers\u4e2d\u7684IOS XE Software\u7684USB-modem\u4ee3\u7801\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u9a8c\u8bc1\u8f93\u5165\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8986\u76d6\u5e95\u5c42\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u7684\u4efb\u610f\u6587\u4ef6\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-2",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-32524",
  "openTime": "2017-11-02",
  "patchDescription": "Cisco ASR 920 Series Aggregation Services Routers\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684ASR 920\u7cfb\u5217\u591a\u529f\u80fd\u8def\u7531\u5668\u3002Cisco IOS XE Software\u662f\u5176\u4e2d\u7684\u4e00\u5957\u7f51\u7edc\u8bbe\u5907\u4e13\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nCisco ASR 920 Series Aggregation Services Routers\u4e2d\u7684IOS XE Software\u7684USB-modem\u4ee3\u7801\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u9a8c\u8bc1\u8f93\u5165\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8986\u76d6\u5e95\u5c42\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u7684\u4efb\u610f\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco IOS XE Software\u4efb\u610f\u6587\u4ef6\u8986\u76d6\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco IOS XE Software 0",
      "Cisco ASR 920 Series Aggregation Services Router Fuji-16.8.1",
      "Cisco ASR 920 Series Aggregation Services Router 15.6(2)S"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-6795\r\nhttp://www.securityfocus.com/bid/100656",
  "serverity": "\u4e2d",
  "submitTime": "2017-09-08",
  "title": "Cisco IOS XE Software\u4efb\u610f\u6587\u4ef6\u8986\u76d6\u6f0f\u6d1e"
}

CVE-2017-6795 (GCVE-0-2017-6795)

Vulnerability from cvelistv5

Published

2017-09-07 21:00

Modified

2024-08-05 15:41

Severity ?

CWE

CWE-20

Summary

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the platform usb modem command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the platform usb modem command in the CLI of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying operating system of an affected device. Cisco Bug IDs: CSCvf10783.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/100656	vdb-entry, x_refsource_BID
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-2	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039282	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	n/a	Cisco IOS XE	Version: Cisco IOS XE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:41:17.539Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "100656",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100656"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-2"
          },
          {
            "name": "1039282",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039282"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco IOS XE",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Cisco IOS XE"
            }
          ]
        }
      ],
      "datePublic": "2017-09-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the platform usb modem command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the platform usb modem command in the CLI of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying operating system of an affected device. Cisco Bug IDs: CSCvf10783."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-09T09:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "100656",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100656"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-2"
        },
        {
          "name": "1039282",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039282"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2017-6795",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco IOS XE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Cisco IOS XE"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the platform usb modem command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the platform usb modem command in the CLI of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying operating system of an affected device. Cisco Bug IDs: CSCvf10783."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "100656",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100656"
            },
            {
              "name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-2",
              "refsource": "CONFIRM",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-2"
            },
            {
              "name": "1039282",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039282"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2017-6795",
    "datePublished": "2017-09-07T21:00:00",
    "dateReserved": "2017-03-09T00:00:00",
    "dateUpdated": "2024-08-05T15:41:17.539Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted