Cisco has released free software updates that address the vulnerability
described in this advisory. Customers may only install and expect
support for software versions and feature sets for which they have
purchased a license. By installing, downloading, accessing, or otherwise
using such software upgrades, customers agree to follow the terms of
the Cisco software license:
Additionally, customers may only download software for which they
have a valid license, procured from Cisco directly, or through a Cisco
authorized reseller or partner. In most cases this will be a maintenance
upgrade to software that was previously purchased. Free security
software updates do not entitle customers to a new software license,
additional software feature sets, or major revision upgrades.
When considering software upgrades, customers are advised to consult the Cisco Security Advisories and Responses archive at http://www.cisco.com/go/psirt and review subsequent advisories to determine exposure and a complete upgrade solution.
In all cases, customers should ensure that the devices to upgrade
contain sufficient memory and confirm that current hardware and software
configurations will continue to be supported properly by the new
release. If the information is not clear, customers are advised to
contact the Cisco Technical Assistance Center (TAC) or their contracted
Customers Without Service Contracts
Customers who purchase directly from Cisco but do not hold a Cisco
service contract and customers who make purchases through third-party
vendors but are unsuccessful in obtaining fixed software through their
point of sale should obtain upgrades by contacting the Cisco Technical
Assistance Center (TAC):
Customers should have the product serial number available and be
prepared to provide the URL of this advisory as evidence of entitlement
to a free upgrade.
This vulnerability is fixed in Cisco Application Policy Infrastructure Controller Enterprise Module release 1.2 and later.
To download a release of Cisco APIC-EM Software, visit the Software Center on Cisco.com
and navigate to
> Cloud and Systems Management > Policy and Automation Controllers >
Application Policy Infrastructure Controller Enterprise Module (APIC-EM).