This vulnerability affects all Engine 5 Line Cards on the Cisco XR
12000 Series Routers. The engine 5 line cards are the SIP-600, SIP-601,
SIP-501, and SIP-401.
To determine the Cisco IOS XR Software release that is running on a
Cisco product, administrators can log in to the device and issue the
show version command-line interface (CLI) command to display
the system banner. The system banner confirms that the device is running Cisco
IOS XR Software by displaying text that is similar to "Cisco IOS XR Software".
The software version is displayed after the text "Cisco IOS XR
The following example identifies a Cisco XR 12000 Series Router that is
running Cisco IOS XR Software Release 3.9.1:
Wed Dec 15 10:16:47.117 singa
Cisco IOS XR Software, Version 3.9.1
Copyright (c) 2010 by Cisco Systems, Inc.
ROM: System Bootstrap, Version 12.0(20090302:133850) [rtauro-sw30346-33S 1.23dev(0.36)] DEVELOPMENT SOFTWARE
Copyright (c) 1994-2009 by cisco Systems, Inc.
example uptime is 26 minutes
System image file is "disk0:c12k-os-mbi-3.9.1/mbiprp-rp.vm"
cisco 12404/PRP (7457) processor with 3145728K bytes of memory.
7457 processor at 1266Mhz, Revision 1.2
1 Cisco 12000 Series Performance Route Processor
1 Cisco 12000 Series SPA Interface Processor-601/501/401
1 Cisco 12000 4 Port Gigabit Ethernet Controller (4 GigabitEthernet)
3 Management Ethernet
4 GigabitEthernet/IEEE 802.3 interface(s)
1019k bytes of non-volatile configuration memory.
982304k bytes of disk0: (Sector size 512 bytes).
62420k bytes of disk1: (Sector size 512 bytes).
65536k bytes of Flash internal SIMM (Sector size 256k).
!--- output truncated
To determine if a SPA interface processor is installed in the device,
administrators can log in to the device and issue the show
platform command to display the system line cards. The output confirms
that the device has a SPA interface processor installed by displaying text that
is similar to "L3LC Eng 5".
The following example identifies a Cisco XR 12000 Series Router that
has an Engine 5 Line Card installed:
Mon May 9 18:40:26.100 PST
Node Type PLIM State Config State
0/0/CPU0 PRP(Active) N/A IOS XR RUN PWR,NSHUT,MON
0/1/CPU0 L3LC Eng 5+ Jacket Card IOS XR RUN PWR,NSHUT,MON
0/1/0 SPA SPA-8XFE-TX READY PWR,NSHUT
0/2/CPU0 L3LC Eng 3 GE-4 IOS XR RUN PWR,NSHUT,MON
Alternatively, performing the CLI command show diag | include
SPA Interface Processor will also show if any SPA interface processor
are installed. The following example shows a device with a SIP-401
RP/0/0/CPU0:example#show diag | include SPA Interface Processor
Mon May 9 18:44:23.069 PST
SLOT 1 (RP/LC 1): Cisco 12000 Series SPA Interface Processor- 401
No other releases of Cisco IOS XR Software are affected.
The following products are not affected by this vulnerability:
Cisco 12000 Series SPA interface processors running Cisco IOS
Cisco XR 12000 Series Engine 3 Line Cards
Cisco ASR 9000 Series Aggregation Services Routers
Cisco Carrier Routing System Series Routers
No other Cisco products are currently known to be affected by this