Protect Against CSCwi63113 During Upgrade to 7.2.6

Available Languages

Download Options

  • PDF     (333.3 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (401.6 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (347.6 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:April 27, 2024
Document ID:221947

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

    Introduction

    This document describes information related to Cisco bug ID CSCwi63113 and how to prevent problems during the upgrade to FTD version 7.2.6.

    Background

    Cisco Firepower Threat Defense software version 7.2.6 contains Cisco bug ID CSCwi63113, which prevents some devices from booting when SNMP is enabled. Before installing 7.2.6, please disable SNMP until you can upgrade to 7.2.7 or beyond. A fix for this is being prepared and will be released as 7.2.7 by 3 May 2024. Additionally, Cisco will be releasing 7.2.5.2 by 6 May 2024, which is 7.2.5.1 with only the fixes for CVE-2024-20353, CVE-2024-20359, and CVE-2024-20358.

    Disable SNMP before the upgrade

    FMC Steps:

    Step 1: Log into your FMC

    Step 2:  Navigate to Devices > Platform Settings
    Platform Settings

    Step 3: Edit the policy associated with your FTD devices

    Edit Policy

    Step 4: Select SNMP

    SNMP Configuration

    Step 5: Disable SNMP Servers

    Enable SNMP Servers

    Step 6: Save to policy and deploy

    Click on Deploy

    Please look at the defect for more up-to-date information: Cisco bug ID CSCwi63113. 

    If you need any further information, please contact Cisco TAC (support.cisco.com )  and reference Arcane Door (cisco-sa-asaftd-persist-rce-FLsNXF4h / CVE-2024-20359)

    What to do If you have already upgraded and are experiencing a boot loop:

    If you have already updated to 7.2.6 and are facing the effects of Cisco bug ID CSCwi63113please contact Cisco TAC (support.cisco.com ).

    Revision History

    Revision Publish Date Comments
    1.0
    26-Apr-2024
    Initial Release
    TAC Authored

    Contributed by Cisco Engineers

    • Foster Lipkey
      Principal Engineer

    Was this Document Helpful?

    FeedbackFeedback

    Contact Cisco

    This Document Applies to These Products