Introduction
This document describes information related to Cisco bug ID CSCwi63113 and how to prevent problems during the upgrade to FTD version 7.2.6.
Background
Cisco Firepower Threat Defense software version 7.2.6 contains Cisco bug ID CSCwi63113, which prevents some devices from booting when SNMP is enabled. Before installing 7.2.6, please disable SNMP until you can upgrade to 7.2.7 or beyond. A fix for this is being prepared and will be released as 7.2.7 by 3 May 2024. Additionally, Cisco will be releasing 7.2.5.2 by 6 May 2024, which is 7.2.5.1 with only the fixes for CVE-2024-20353, CVE-2024-20359, and CVE-2024-20358.
Disable SNMP before the upgrade
FMC Steps:
Step 1: Log into your FMC
Step 2: Navigate to Devices > Platform Settings
Step 3: Edit the policy associated with your FTD devices
Step 4: Select SNMP
Step 5: Disable SNMP Servers
Step 6: Save to policy and deploy
Please look at the defect for more up-to-date information: Cisco bug ID CSCwi63113.
If you need any further information, please contact Cisco TAC (support.cisco.com ) and reference Arcane Door (cisco-sa-asaftd-persist-rce-FLsNXF4h / CVE-2024-20359)
What to do If you have already upgraded and are experiencing a boot loop:
If you have already updated to 7.2.6 and are facing the effects of Cisco bug ID CSCwi63113please contact Cisco TAC (support.cisco.com ).