How severe is CVE-2017-6774?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5 out of 10.

What type of vulnerability is CVE-2017-6774?

This is classified as CWE-552, which is a common weakness in software security.

CVE-2017-6774 - MEDIUM Severity | CVSS 5

Vulnerability Description

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP subdirectories. An attacker could exploit this vulnerability by overwriting sensitive configuration files through FTP. An exploit could allow the attacker to overwrite configuration files on an affected system. Cisco Bug IDs: CSCvd47739. Known Affected Releases: 21.0.v0.65839.

Related Vulnerabilities

CVE-2015-4715

MEDIUM

CVSS:4.9(Medium)

The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote ad...

CWE-5522015

CVE-2021-24154

MEDIUM

CVSS:4.9(Medium)

The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the download_file() function, allowing administrators to download arbitrary files on the web s...

CWE-5522021

CVE-2021-25004

MEDIUM

CVSS:4.9(Medium)

The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server wit...

CWE-5522021

CVE-2021-32752

MEDIUM

CVSS:4.9(Medium)

Ether Logs is a package that allows one to check one's logs in the Craft 3 utilities section. A vulnerability was found in versions prior to 3.0.4 that allowed authenticated admin users to access any ...

CWE-5522021

CVE-2021-44983

MEDIUM

CVSS:4.9(Medium)

In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column.

CWE-5522021

CVE-2022-2222

MEDIUM

CVSS:4.9(Medium)

The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download ...

CWE-5522022