CVE-2017-6690: A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running th...

Security readout for executives and security teams

CVE-2017-6690 affects Cisco ASR 5000 routers running StarOS. An authenticated remote attacker could overwrite or modify arbitrary files, risking router integrity and service stability. The source bundle names affected and fixed StarOS releases, but does not provide CVSS scoring or confirmed exploitation. Exposure is limited to organizations operating Cisco ASR 5000 Series routers on affected Cisco StarOS releases. The attacker must be authenticated and remote. The bundle does not specify which services, roles, or management paths are required. Prioritize remediation where ASR 5000 routers support production carrier, mobile, or customer-facing services. The vulnerability requires authentication, but arbitrary file modification on routing infrastructure can create material operational risk. Mitigation focus: Upgrade affected StarOS systems to a Cisco-listed fixed release.; Review Cisco advisory CSCvd73726 for exact platform and release applicability.; Restrict authenticated management access to trusted administrative networks..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.