CLI Command Injection Vulnerability in Cisco ASR 5000 Series Routers

CVE-2018-0122

Summary

A security flaw in the command-line interface (CLI) of Cisco's StarOS operating system for the ASR 5000 Series Routers permits authenticated local attackers to overwrite important system files. This vulnerability stems from inadequate validation of user input handled by the CLI. By crafting malicious command arguments, an attacker can exploit this vulnerability, provided they have valid administrator credentials to access the affected system. Successful exploitation grants the ability to modify or replace arbitrary files stored in the system's flash memory, posing a significant risk to system integrity.

References