Contents

Introduction

Background

Disable SNMP before the upgrade

FMC Steps:

Step 1: Log into your FMC

Step 2: Navigate to Devices > Platform Settings

Step 3: Edit the policy associated with your FTD devices

Step 4: Select SNMP

Step 5: Disable SNMP Servers

Step 6: Save to policy and deploy

What to do If you have already upgraded and are experiencing a boot loop:

Introduction

This document describes information related to Cisco bug ID CSCwi63113 and how to prevent problems during the upgrade to FTD version 7.2.6.

Background

Cisco Firepower Threat Defense software version 7.2.6 contains Cisco bug ID CSCwi63113, which prevents some devices from booting when SNMP is enabled. Before installing 7.2.6, please disable SNMP until you can upgrade to 7.2.7 or beyond. A fix for this is being prepared and will be released as 7.2.7 by 3 May 2024. Additionally, Cisco will be releasing 7.2.5.2 by 6 May 2024, which is 7.2.5.1 with only the fixes for CVE-2024-20353, CVE-2024-20359, and CVE-2024-20358.

Disable SNMP before the upgrade

FMC Steps:

Step 1: Log into your FMC

Step 2:  Navigate to Devices > Platform Settings

Step 3: Edit the policy associated with your FTD devices

Step 4: Select SNMP

Step 5: Disable SNMP Servers

Step 6: Save to policy and deploy

Please look at the defect for more up-to-date information: Cisco bug ID CSCwi63113.

If you need any further information, please contact Cisco TAC (support.cisco.com )  and reference Arcane Door (cisco-sa-asaftd-persist-rce-FLsNXF4h / CVE-2024-20359)

What to do If you have already upgraded and are experiencing a boot loop:

If you have already updated to 7.2.6 and are facing the effects of Cisco bug ID CSCwi63113please contact Cisco TAC (support.cisco.com ).