CVE-2017-3819

CVE-2017-3819 is a privilege escalation vulnerability in the Secure Shell (SSH) subsystem of Cisco ASR 5000/5500/5700 Series devices and Cisco Virtualized Packet Core running StarOS. It allows an authenticated, remote attacker to gain unrestricted root shell access due to missing input validation during SSH or SFTP login. The vulnerability has a CVSSv3 score of 8.8 (High), indicating a significant risk. An attacker with valid credentials can exploit this remotely over an established TCP connection to port 22, requiring low attack complexity and resulting in full confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this vulnerability. Despite its high severity, it appears to have received limited public attention.