CVE-2017-6796

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the platform usb modem command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the platform usb modem command in the CLI of an affected device. A successful exploit could allow the attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. Cisco Bug IDs: CSCve48949.

• CWE-78
• CWE-78

• http://www.securityfocus.com/bid/100647Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039281Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-1Vendor Advisory
• http://www.securityfocus.com/bid/100647Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039281Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-1Vendor Advisory

Published

Sep 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6790A vulnerability in the Session Initiation Protocol (SIP) on …
• CVE-2017-6791A vulnerability in the Trust Verification Service (TVS) of C…
• CVE-2017-6792A vulnerability in the batch provisioning feature in Cisco P…
• CVE-2017-6793A vulnerability in the Inventory Management feature of Cisco…
• CVE-2017-6794A vulnerability in the CLI command-parsing code of Cisco Mee…
• CVE-2017-6795A vulnerability in the USB-modem code of Cisco IOS XE Softwa…
• CVE-2017-6797A cross-site scripting (XSS) vulnerability in bug_change_sta…
• CVE-2017-6798Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijac…7.8
• CVE-2017-6799A cross-site scripting (XSS) vulnerability in view_filters_p…
• CVE-2017-6800An issue was discovered in ytnef before 1.9.2. An invalid me…
• CVE-2017-6801An issue was discovered in ytnef before 1.9.2. There is a po…
• CVE-2017-6802An issue was discovered in ytnef before 1.9.2. There is a po…