CVE:CVE-2017-6707
CNNVD:CNNVD-201707-156
Cisco ASR 5500 Series等都是美国思科（Cisco）公司的5500等系列路由器设备。StarOS是用于其中的一套Linux操作系统。
多款Cisco产品中的StarOS的CLI命令解析代码存在命令注入漏洞，该漏洞源于程序没有充分的过滤命令。本地攻击者可通过提交特制的CLI命令利用该漏洞以Linux root用户身份执行任意的shell命令。以下产品和版本受到影响：Cisco ASR 5000 Series 11.0版本至21.0版本；5500 Series；5700 Series；Cisco Virtualized Packet Core (VPC)。
solution:Upgrade cisco staros to a higher version than 11.0_base,12.0.0,12.1_base,12.2(300,12.2_base,14.0(600,14.0.0,15.0(912,15.0(935,15.0(938,15.0_base,16.0(900,16.0.0,16.1.0,16.1.1,16.1.2,16.5.0,16.5.2,17.2.0,17.2.0.59184,17.3.0,17.3.1,17.3_base,17.7.0,18.0.0,18.0.0.57828,18.0.0.59167,18.0.0.59211,18.0.l0.59219,18.1.0,18.1.0.59776,18.1.0.59780,18.1_base,18.3.0,18.3_base,18.4.0,19.0.1,19.0.m0.60737,19.0.m0.60828,19.0.m0.61045,19.1.0,19.1.0.61559,19.2.0,19.3.0,20.0.0,20.0.1.0,20.0.1.a0,20.0.1.v0,20.0.2.3,20.0.2.3.65026,20.0.2.v1,20.0.m0.62842,20.0.m0.63229,20.0.v0,21.0.0,21.0_base,21.0_m0.64246,21.0_m0.64702,and avoid the version 11.0_base,12.0.0,12.1_base,12.2(300),12.2_base,14.0(600),14.0.0,15.0(912),15.0(935),15.0(938),15.0_base,16.0(900),16.0.0,16.1.0,16.1.1,16.1.2,16.5.0,16.5.2,17.2.0,17.2.0.59184,17.3.0,17.3.1,17.3_base,17.7.0,18.0.0,18.0.0.57828,18.0.0.59167,18.0.0.59211,18.0.l0.59219,18.1.0,18.1.0.59776,18.1.0.59780,18.1_base,18.3.0,18.3_base,18.4.0,19.0.1,19.0.m0.60737,19.0.m0.60828,19.0.m0.61045,19.1.0,19.1.0.61559,19.2.0,19.3.0,20.0.0,20.0.1.0,20.0.1.a0,20.0.1.v0,20.0.2.3,20.0.2.3.65026,20.0.2.v1,20.0.m0.62842,20.0.m0.63229,20.0.v0,21.0.0,21.0_base,21.0_m0.64246,21.0_m0.64702