Determine Fix for IOS XE Software Web UI

Introduction

This document describes a list of software versions that have incorporated fixes for Cisco IOS® XE Software Web UI Cisco bug ID CSCwh87343. 

Background Information

Software Fix Delivery

The security advisory can be viewed here:

• Multiple Vulnerabilities in Cisco IOS XE Software Web UI Feature

Note: This document is dynamic and subject to updates as new fixed software versions become available.

The software fix is being delivered through either a full IOS XE software image or an IOS XE Software Maintenance Upgrade (SMU) package. 

Only products listed in the IOS XE Software Maintenance Upgrade (SMU) - Detailed Breakdown section of this document have the SMU package released for Cisco bug ID CSCwh87343 Privllege Escalation Vulnerability.

If no SMU package is available for the specific product or currently used IOS XE version, the software upgrade to the fixed version using a full IOS XE image must be performed.

Example 1:

On Catalyst 9200 Series Switch which currently runs IOS XE version 17.9.4 the fix for Cisco bug ID CSCwh87343 can be applied twofold:

1) full IOS XE image upgrade to version 17.9.4a

or

2) SMU package installed on the currently used version 17.9.4 (Reload Required)

Example 2:

On Catalyst 9200 Series Switch which currently runs IOS XE version 17.9.2 the fix for Cisco bug ID CSCwh87343 can be applied through a full IOS XE image upgrade to version 17.9.4a.

Full IOS XE Image Overview

The full IOS XE image versions are published for Extended Maintenance releases as described in this table. Estimated release dates are provided in Pacific Time (UTC-7):

IOS XE Software Maintenance Upgrade (SMU) Overview

The Reload Required SMU packages are published for specific Extended Maintenance releases as described in this table. Estimated release dates are provided in Pacific Time (UTC-7). For other releases, please upgrade to full CCO images posted with the fix:

• General Software Maintenance Upgrade restrictions and installation steps are documented in the System Management Configuration Guide, Cisco IOS XE Cupertino 17.9.x (Catalyst 9300 Switches).
• Software Maintenance Upgrade information specific to Catalyst 9800 can be found in the 9800 configuration guide.

Full IOS XE Image Detailed Breakdown

This table lists the affected products and the date when the full IOS XE images are available for download.

Routing/SDWAN

Switching

Wireless

IOT Switching

IOT Routing

Service Provider (Aggregation and Pre-aggregation Routing)

IOS XE Software Maintenance Upgrade (SMU) Detailed Breakdown

This table lists the affected producs and the date when the Reload Required SMU packages are available for download:

Routing

Switching

Wireless

My Notifications Service

Customers can use My Notifications service to get notified about updates to Cisco bug ID CSCwh87343.

These instructions describe how to create a subscription:

1. Click the Track a Bug link.

2. Enter bug ID: CSCwh87343.

3. Set frequency of notifications (daily/weekly/monthly) and confirm the email address to be used.

4. Click the Track a Bug button.