Software Fix Availability for Cisco IOS XE Software Web UI Privilege Escalation Vulnerability - CVE-2023-20198

Introduction

This document describes a comprehensive list of software versions that have incorporated fixes for Cisco IOS® XE Software Web UI Privllege Escalation Vulnerability (CVE-2023-20198) - Cisco bug ID CSCwh87343. 

The security advisory can be viewed here:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z

Note: This document is dynamic and subject to updates as new fixed software versions become available.

Software Fix Delivery

The software fix is being delivered through either a full IOS XE software image or an IOS XE Software Maintenance Upgrade (SMU) package.
Only products listed in the "IOS XE Software Maintenance Upgrade (SMU) - Detailed Breakdown" section of this document have the SMU package released for Cisco bug ID CSCwh87343. 

If no SMU package is available for the specific product or currently used IOS XE version the software upgrade to the fixed version using a full IOS XE image must be performed.

Example #1:

On Catalyst 9200 Series Switch which currently runs IOS XE version 17.9.4 the fix for Cisco bug ID CSCwh87343 can be applied twofold:

1) full IOS XE image upgrade to version 17.9.4a

or

2) SMU package installed on the currently used version 17.9.4 (Reload Required)

Example #2:

On Catalyst 9200 Series Switch which currently runs IOS XE version 17.9.2 the fix for Cisco bug ID CSCwh87343 should be applied through a full IOS XE image upgrade to version 17.9.4a.

Full IOS XE Image - Overview

The full IOS XE image versions are published for Extended Maintenance releases as described in this table.

Estimated release dates are provided in Pacific Time (UTC-7).

IOS XE Software Maintenance Upgrade (SMU) - Overview

The Reload Required SMU packages are published for specific Extended Maintenance releases as described in this table.

Estimated release dates are provided in Pacific Time (UTC-7). 

For other releases, please upgrade to full CCO images posted with the fix

General Software Maintenance Upgrade restrictions and installation steps are documented in this configuration guide:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-9/configuration_guide/sys_mgmt/b_179_sys_mgmt_9300_cg/software_maintenance_upgrade.html

Software Maintenance Upgrade information specific to Catalyst 9800 can be found in the 9800 configuration guide

Full IOS XE Image - Detailed Breakdown

This table lists the affected producs and the date when the full IOS XE images are available for download:

Routing/SDWAN

Switching

Wireless

IOT Switching

IOT Routing

Service Provider (Aggregation and Pre-Aggregation Routing)

IOS XE Software Maintenance Upgrade (SMU)  - Detailed Breakdown

This table lists the affected producs and the date when the Reload Required SMU packages are available for download:

Routing

Switching

Wireless

My Notifications service

Customers can use My Notifications service to get notified about updates to Cisco bug ID CSCwh87343.

These instructions describe how to create a subscription.

1. Click "Track a Bug" link

2. Enter bug ID: CSCwh87343 , set frequency of notifications (daily/weekly/monthly) and confirm the email address to be used.

3. Click "Track a Bug" button.