topic Re: Software Bug Fix in Network Security

Software Bug Fix

Simon.peters1 — Wed, 10 Jul 2019 10:41:59 GMT

Hello,

A really simple one I think.... we have a PCI scan done and a software Vulnerability was found and I found the bug but I can't seem to locate a fix for it.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-asa

The device is a ASA 5505 which is running 9.2(3) which is the latest I can find. How do I download an apply the fix?

Thanks!

Re: Software Bug Fix

Rob Ingram — Wed, 10 Jul 2019 10:47:36 GMT

Hi,
The known fixed releases for that bug that could work on the ASA 5505 are:-

9.2(4.11) or downgrade to 9.1(7), 9.1(6.100), newer ASA code is not supported on the ASA 5505.

HTH

Re: Software Bug Fix

Simon.peters1 — Wed, 10 Jul 2019 10:52:56 GMT

Thanks, I did wonder if a downgrade would be required.

Will the latest for the 5505 not be fixed in a new resale then?

Re: Software Bug Fix

Rob Ingram — Wed, 10 Jul 2019 11:08:50 GMT

No. The ASA 5505 has long been EOL, so no upgrades available for a while. Recently the replacement for the 5505 the 5506 has also become EOL. The newer model is the Firepower 1000 series has just been released.

HTH

Re: Software Bug Fix

Simon.peters1 — Wed, 10 Jul 2019 11:16:37 GMT

Thanks!

So if I upload the older version to the flash and set to boot it will work ok?

Re: Software Bug Fix

Rob Ingram — Wed, 10 Jul 2019 11:32:10 GMT

Essentially yes, guide here if required.