Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-03-08	CVE-2018-0217	OS Command Injection vulnerability in Cisco products A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to perform a command injection attack on an affected system. local low complexity cisco CWE-78	6.7
2017-09-07	CVE-2017-12217	Improper Input Validation vulnerability in Cisco ASR 5500 Firmware A vulnerability in the General Packet Radio Service (GPRS) Tunneling Protocol ingress packet handler of Cisco ASR 5500 System Architecture Evolution (SAE) Gateways could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition on an affected device. network low complexity cisco CWE-20	5.3