CVE-2018-0224

Name of the Vulnerable Software and Affected Versions: Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers (affected versions not specified)

Description: A vulnerability in the CLI of the Cisco StarOS operating system could allow an authenticated, local attacker to execute arbitrary commands with root privileges. The issue is due to insufficient validation of user-supplied input. An attacker could exploit this by authenticating to the system and injecting malicious arguments into a vulnerable CLI command, potentially allowing the execution of arbitrary commands with root privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.