cisco-sa-cdb-cmicr-vulns-KJjFtNb: Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities
First published: Wed Apr 13 2022(Updated: )
Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cdb-cmicr-dos-KJjFtNb
Credit: These vulnerabilities were found during internal security testing.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS Software | >=15.2(5)EX<=15.2(7)E and earlier<15.2(7)E5 | 15.2(7)E5 |
| Cisco IOS Software | =15.2(8)E<15.2(8)E1=15.2(7)E and earlier<15.2(7)E5 | 15.2(8)E1 15.2(7)E5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability name?
Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities
What is the severity level of Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities?
The severity level of Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities is medium.
How can an attacker exploit this vulnerability?
An attacker can execute persistent code at boot time or permanently prevent the device from booting, resulting in a permanent denial of service (DoS) condition.
Which software versions are affected by this vulnerability?
This vulnerability affects Cisco IOS Software versions 15.2(5)EX up to 15.2(7)E5 and 15.2(8)E up to 15.2(8)E1.
How can I fix this vulnerability?
To fix this vulnerability, update the affected Cisco IOS Software to version 15.2(7)E5 or 15.2(8)E1 or later.
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/references
- agent/weakness
- agent/severity
- agent/title
- agent/author
- agent/tags
- agent/description
- agent/event
- vendor/cisco
- canonical/cisco ios software
- version/cisco ios software/15.2(5)ex
- version/cisco ios software/15.2(7)e and earlier
- version/cisco ios software/15.2(8)e