CVE:CVE-2017-12239
CNNVD:CNNVD-201709-1295
Cisco ASR 1000 Series Aggregation Services Routers和Cisco cBR-8 Converged Broadband Routers都是美国思科（Cisco）公司的路由器设备。IOS XE是使用在其中的一套网络设备专用的操作系统。
使用IOS XE 3.16版本至16.5版本的Cisco ASR 1000 Series Aggregation Services Routers和Cisco cBR-8 Converged Broadband Routers中的线卡的主板控制台端口存在安全漏洞。本地攻击者可通过物理连接线卡上的控制台端口利用该漏洞访问受影响设备的操作系统。
solution:Upgrade cisco ios_xe to a higher version than 3.13.0as,3.13.0s,3.13.1s,3.13.2as,3.13.2s,3.13.3s,3.13.4s,3.13.5as,3.13.5s,3.13.6as,3.13.6s,3.14.0s,3.14.1s,3.14.2s,3.14.3s,3.14.4s,3.15.0s,3.15.1cs,3.15.1s,3.15.2s,3.15.3s,3.15.4s,3.16.0as,3.16.0bs,3.16.0cs,3.16.0s,3.16.1as,3.16.1s,3.16.2as,3.16.2bs,3.16.2s,3.16.3as,3.16.3s,3.16.4as,3.16.4bs,3.16.4cs,3.16.4ds,3.16.4es,3.16.4gs,3.16.4s,3.16.5as,3.16.5bs,3.16.5s,3.17.0s,3.17.1as,3.17.1s,3.17.2s,3.17.3s,3.18.0as,3.18.0s,3.18.0sp,3.18.1asp,3.18.1bsp,3.18.1csp,3.18.1gsp,3.18.1hsp,3.18.1isp,3.18.1s,3.18.1sp,3.18.2asp,3.18.2s,3.18.2sp,16.3.1a,16.3.5b,16.3.6,16.3.7,16.3.8,16.3.9,16.3.10,16.3.11,16.4.3,16.5.1,16.9.3a,16.9.3s,and avoid the version 3.13.0as,3.13.0s,3.13.1s,3.13.2as,3.13.2s,3.13.3s,3.13.4s,3.13.5as,3.13.5s,3.13.6as,3.13.6s,3.14.0s,3.14.1s,3.14.2s,3.14.3s,3.14.4s,3.15.0s,3.15.1cs,3.15.1s,3.15.2s,3.15.3s,3.15.4s,3.16.0as,3.16.0bs,3.16.0cs,3.16.0s,3.16.1as,3.16.1s,3.16.2as,3.16.2bs,3.16.2s,3.16.3as,3.16.3s,3.16.4as,3.16.4bs,3.16.4cs,3.16.4ds,3.16.4es,3.16.4gs,3.16.4s,3.16.5as,3.16.5bs,3.16.5s,3.17.0s,3.17.1as,3.17.1s,3.17.2s,3.17.3s,3.18.0as,3.18.0s,3.18.0sp,3.18.1asp,3.18.1bsp,3.18.1csp,3.18.1gsp,3.18.1hsp,3.18.1isp,3.18.1s,3.18.1sp,3.18.2asp,3.18.2s,3.18.2sp,16.3.1a,16.3.5b,16.3.6,16.3.7,16.3.8,16.3.9,16.3.10,16.3.11,16.4.3,16.5.1,16.9.3a,16.9.3s