CVE-2017-6796

State: Published
Severity: Not scored
Published: Sep 7, 2017
Updated: Aug 5, 2024
Reserved: Mar 9, 2017

Description

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the platform usb modem command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the platform usb modem command in the CLI of an affected device. A successful exploit could allow the attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. Cisco Bug IDs: CSCve48949.

Scores

The record has no CVSS score.

Weaknesses

CWE-78

Affected Products

Product	Versions
Cisco IOS XEn/a	Cisco IOS XEAffected

References

1039281vdb-entry
100647vdb-entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-1

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.