CVE:CVE-2018-0217
CNNVD:CNNVD-201803-250
Cisco ASR 5000 Series Aggregation Services Routers是美国思科（Cisco）公司的一款5000系列安全路由器设备。StarOS operating system是一套运行在其中的虚拟化操作系统。CLI是其中的一个命令行界面。
Cisco ASR 5000 Series Aggregation Services Routers中的StarOS操作系统的CLI存在命令注入漏洞，该漏洞源于程序没有充分的校验提交到CLI配置中的命令。本地攻击者可通过向受影响的CLI命令中注入特制的参数利用该漏洞在受影响系统的CLI中注入并执行任意命令。
solution:Upgrade cisco asr_5000_firmware to a higher version than 21.3.0.67664,21.7.0,and avoid the version 21.3.0.67664,21.7.0; Upgrade cisco asr_5700_firmware to a higher version than 21.3.0.67664,21.7.0,and avoid the version 21.3.0.67664,21.7.0; Upgrade cisco asr_5500_firmware to a higher version than 21.3.0.67664,21.7.0,and avoid the version 21.3.0.67664,21.7.0