CVE-2018-0217
Quick assessment
Affected
n/a Cisco StarOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco ASR 5000 Series Aggregation Services Routers是美国思科（Cisco）公司的一款5000系列安全路由器设备。StarOS operating system是一套运行在其中的虚拟化操作系统。CLI是其中的一个命令行界面。 Cisco ASR 5000 Series Aggregation Services Routers中的StarOS操作系统的CLI存在命令注入漏洞，该漏洞源于程序没有充分的校验提交到CLI配置中的命令。本地攻击者可通过向受影响的CLI
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-0217
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to perform a command injection attack on an affected system. The vulnerability is due to insufficient validation of commands that are supplied to certain configurations in the CLI of the affected operating system. An attacker could exploit this vulnerability by injecting crafted arguments into a vulnerable CLI command for an affected system. A successful exploit could allow the attacker to insert and execute arbitrary commands in the CLI of the affected system. To exploit this vulnerability, the attacker would need to authenticate to an affected system by using valid administrator credentials. Cisco Bug IDs: CSCvg29441.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco ASR 5000 Series Aggregation Services Routers StarOS操作系统CLI 命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco ASR 5000 Series Aggregation Services Routers是美国思科（Cisco）公司的一款5000系列安全路由器设备。StarOS operating system是一套运行在其中的虚拟化操作系统。CLI是其中的一个命令行界面。 Cisco ASR 5000 Series Aggregation Services Routers中的StarOS操作系统的CLI存在命令注入漏洞，该漏洞源于程序没有充分的校验提交到CLI配置中的命令。本地攻击者可通过向受影响的CLI
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Cisco StarOS | Cisco StarOS | - |
|
II. Public POCs for CVE-2018-0217
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-0217
请登录查看更多情报信息。
Vendor Advisories for CVE-2018-0217 (3)
Same Patch Batch · n/a · 2018-03-08 · 47 CVEs total
| CVE-2018-7871 | libming 缓冲区错误漏洞 | |
| CVE-2018-7874 | libming 安全漏洞 | |
| CVE-2018-7876 | libming 安全漏洞 | |
| CVE-2014-7272 | Simple Desktop Display Manager 权限许可和访问控制漏洞 | |
| CVE-2018-5313 | Rapid Scada 安全漏洞 | |
| CVE-2018-7183 | NTP ntpq 缓冲区错误漏洞 | |
| CVE-2018-7889 | Calibre 安全漏洞 | |
| CVE-2018-7890 | Zoho ManageEngine Applications Manager 命令注入漏洞 | |
| CVE-2014-7271 | Simple Desktop Display Manager 安全漏洞 | |
| CVE-2018-7872 | libming 安全漏洞 | |
| CVE-2018-7873 | libming 缓冲区错误漏洞 | |
| CVE-2018-7870 | libming 安全漏洞 | |
| CVE-2018-7869 | libming 安全漏洞 | |
| CVE-2018-7868 | libming 缓冲区错误漏洞 | |
| CVE-2018-7867 | libming 缓冲区错误漏洞 | |
| CVE-2018-7866 | libming 安全漏洞 | |
| CVE-2018-1220 | EMC RSA Archer 安全漏洞 | |
| CVE-2018-1219 | EMC RSA Archer 访问控制错误漏洞 | |
| CVE-2018-1216 | 多款Dell产品vApp Manager 安全漏洞 | |
| CVE-2018-1215 | 多款Dell产品安全漏洞 |
Showing top 20 of 47 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco StarOS
-
CVE-2018-0239
Cisco Aggregation Services Router 5000 Series Routers和Virtua -
CVE-2018-0224
Cisco ASR 5000 Series Aggregation Services Routers StarOS操作系 -
CVE-2018-0115
Cisco ASR 5000 Series路由器Cisco StarOS操作系统命令注入漏洞 -
CVE-2017-6729
Cisco ASR 5000 Series Routers和Cisco Virtualized Packet Core -
CVE-2017-6707
多款Cisco产品StarOS 操作系统命令注入漏洞
Same vendor: n/a
-
CVE-2026-94148
ScadaBR Export Project Endpoint export_project.htm EmportDwr -
CVE-2026-94110
QCMS Content Detail Controllers.php self_Tmp sql injection -
CVE-2026-94103
RooCMS Frontend Rendering site_pagePHP.php eval code injecti -
CVE-2026-94102
WuzhiCMS Login index.php redirect -
CVE-2026-94094
OpenClaw Canvas Host Route server.ts createCanvasHostHandler
Same weakness: CWE-77
-
CVE-2026-94139
Chengdu Feiyuxing Technology Feiyu Star Router Cookie send_o -
CVE-2026-94138
Chengdu Feiyuxing Technology Feiyu Star Router send_order.cg -
CVE-2026-94099
Netcore NBR200V2 Backup Restore restore.cgi command injectio -
CVE-2026-94098
Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade comma -
CVE-2026-94097
Netcore NBR200V2 CGI Diagnostic Endpoint network_tools comma
V. Comments for CVE-2018-0217
No comments yet