Details of VAR-201803-1596

ID

VAR-201803-1596

CVE

CVE-2018-0217

TITLE

Cisco ASR 5000 Series Aggregation Services Routers StarOS Operating System CLI Command Injection Vulnerability

Trust: 1.2

sources: CNVD: CNVD-2018-06795 // CNNVD: CNNVD-201803-250

DESCRIPTION

A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to perform a command injection attack on an affected system. The vulnerability is due to insufficient validation of commands that are supplied to certain configurations in the CLI of the affected operating system. An attacker could exploit this vulnerability by injecting crafted arguments into a vulnerable CLI command for an affected system. A successful exploit could allow the attacker to insert and execute arbitrary commands in the CLI of the affected system. To exploit this vulnerability, the attacker would need to authenticate to an affected system by using valid administrator credentials. Cisco Bug IDs: CSCvg29441. Vendors have confirmed this vulnerability Bug ID CSCvg29441 It is released as.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Cisco ASR5000 Series AggregationServicesRouters is a 5000 series secure router device from Cisco. StarOSoperatingsystem is a set of virtualized operating systems running on it. The CLI is one of the command line interfaces

Trust: 2.61

sources: NVD: CVE-2018-0217 // JVNDB: JVNDB-2018-002671 // CNVD: CNVD-2018-06795 // BID: 103346 // VULHUB: VHN-118419 // VULMON: CVE-2018-0217

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2018-06795

AFFECTED PRODUCTS

vendor:	cisco	model:	asr 5500	scope:	eq	version:	21.7.0	Trust: 1.6
vendor:	cisco	model:	asr 5700	scope:	eq	version:	21.7.0	Trust: 1.6
vendor:	cisco	model:	asr 5000	scope:	eq	version:	21.3.0.67664	Trust: 1.6
vendor:	cisco	model:	asr 5500	scope:	eq	version:	21.3.0.67664	Trust: 1.6
vendor:	cisco	model:	asr 5700	scope:	eq	version:	21.3.0.67664	Trust: 1.6
vendor:	cisco	model:	asr 5000	scope:	eq	version:	21.7.0	Trust: 1.6
vendor:	cisco	model:	asr 5000	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	asr 5500	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	asr 5700	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	asr series aggregation services routers	scope:	eq	version:	5000	Trust: 0.6
vendor:	cisco	model:	staros	scope:	eq	version:	0	Trust: 0.3
vendor:	cisco	model:	asr series	scope:	eq	version:	500021.7	Trust: 0.3
vendor:	cisco	model:	asr series	scope:	eq	version:	500021.3.0.67664	Trust: 0.3

sources: CNVD: CNVD-2018-06795 // BID: 103346 // JVNDB: JVNDB-2018-002671 // CNNVD: CNNVD-201803-250 // NVD: CVE-2018-0217

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-0217
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2018-0217
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2018-06795
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201803-250
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-118419
value:	HIGH
Trust: 0.1
VULMON:	CVE-2018-0217
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2018-0217
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
CNVD:	CNVD-2018-06795
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
VULHUB:	VHN-118419
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-0217
baseSeverity:	MEDIUM
baseScore:	6.7
vectorString:	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	0.8
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2018-0217
baseSeverity:	MEDIUM
baseScore:	6.7
vectorString:	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2018-06795 // VULHUB: VHN-118419 // VULMON: CVE-2018-0217 // JVNDB: JVNDB-2018-002671 // CNNVD: CNNVD-201803-250 // NVD: CVE-2018-0217

PROBLEMTYPE DATA

problemtype:	CWE-77	Trust: 1.9
problemtype:	CWE-78	Trust: 1.1
problemtype:	CWE-20	Trust: 0.1

sources: VULHUB: VHN-118419 // JVNDB: JVNDB-2018-002671 // NVD: CVE-2018-0217

THREAT TYPE

local

Trust: 0.9

sources: BID: 103346 // CNNVD: CNNVD-201803-250

TYPE

operating system commend injection

Trust: 0.6

sources: CNNVD: CNNVD-201803-250

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-002671

PATCH

title:	cisco-sa-20180307-staros	url:	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180307-staros	Trust: 0.8
title:	CiscoASR5000SeriesAggregationServicesRoutersStarOS Operating System CLI Command Injection Vulnerability Patch	url:	https://www.cnvd.org.cn/patchInfo/show/124233	Trust: 0.6
title:	Cisco: Cisco StarOS CLI Command Injection Vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-20180307-staros	Trust: 0.1

sources: CNVD: CNVD-2018-06795 // VULMON: CVE-2018-0217 // JVNDB: JVNDB-2018-002671

EXTERNAL IDS

db:	NVD	id:	CVE-2018-0217	Trust: 3.5
db:	BID	id:	103346	Trust: 2.7
db:	SECTRACK	id:	1040466	Trust: 1.8
db:	JVNDB	id:	JVNDB-2018-002671	Trust: 0.8
db:	CNNVD	id:	CNNVD-201803-250	Trust: 0.7
db:	CNVD	id:	CNVD-2018-06795	Trust: 0.6
db:	VULHUB	id:	VHN-118419	Trust: 0.1
db:	VULMON	id:	CVE-2018-0217	Trust: 0.1

sources: CNVD: CNVD-2018-06795 // VULHUB: VHN-118419 // VULMON: CVE-2018-0217 // BID: 103346 // JVNDB: JVNDB-2018-002671 // CNNVD: CNNVD-201803-250 // NVD: CVE-2018-0217

REFERENCES

url:	https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20180307-staros	Trust: 2.8
url:	http://www.securityfocus.com/bid/103346	Trust: 2.5
url:	http://www.securitytracker.com/id/1040466	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-0217	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-0217	Trust: 0.8
url:	http://www.cisco.com/	Trust: 0.3
url:	https://cwe.mitre.org/data/definitions/78.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: CNVD: CNVD-2018-06795 // VULHUB: VHN-118419 // VULMON: CVE-2018-0217 // BID: 103346 // JVNDB: JVNDB-2018-002671 // CNNVD: CNNVD-201803-250 // NVD: CVE-2018-0217

CREDITS

Cisco

Trust: 0.3

sources: BID: 103346

SOURCES

db:	CNVD	id:	CNVD-2018-06795
db:	VULHUB	id:	VHN-118419
db:	VULMON	id:	CVE-2018-0217
db:	BID	id:	103346
db:	JVNDB	id:	JVNDB-2018-002671
db:	CNNVD	id:	CNNVD-201803-250
db:	NVD	id:	CVE-2018-0217

LAST UPDATE DATE

2024-11-23T22:38:15.036000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2018-06795	date:	2018-03-30T00:00:00
db:	VULHUB	id:	VHN-118419	date:	2020-09-04T00:00:00
db:	VULMON	id:	CVE-2018-0217	date:	2020-09-04T00:00:00
db:	BID	id:	103346	date:	2018-03-07T00:00:00
db:	JVNDB	id:	JVNDB-2018-002671	date:	2018-04-23T00:00:00
db:	CNNVD	id:	CNNVD-201803-250	date:	2020-09-07T00:00:00
db:	NVD	id:	CVE-2018-0217	date:	2024-11-21T03:37:45.277

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2018-06795	date:	2018-03-30T00:00:00
db:	VULHUB	id:	VHN-118419	date:	2018-03-08T00:00:00
db:	VULMON	id:	CVE-2018-0217	date:	2018-03-08T00:00:00
db:	BID	id:	103346	date:	2018-03-07T00:00:00
db:	JVNDB	id:	JVNDB-2018-002671	date:	2018-04-23T00:00:00
db:	CNNVD	id:	CNNVD-201803-250	date:	2018-03-09T00:00:00
db:	NVD	id:	CVE-2018-0217	date:	2018-03-08T07:29:00.957