Cisco IOS Software Internet Key Exchange Vulnerability Enquiry

yenaungoo — Fri, 21 Feb 2020 12:51:45 GMT

Cisco IOS devices are vulnerable when running a software image of an affected version of Cisco IOS Software that does not support IKE version 2 (IKEv2) and is configured to use IKE version 1 (IKEv1).

Vulnerable Products

This vulnerability affects the 15.1GC, 15.1T, and 15.1XB Cisco IOS Software release trains. No other Cisco IOS Software release trains are affected.

Ref: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-ike

What happen if we are using "not affected version (eg; 12.4, 15.0 releases)" and configured with IKE version1? Can it be affected by this vulnerability?

Router #sh subsys | include ikev2

ikev2_cli_registry Registry 1.000.001

Thanks & Regards,

Cisco IOS Software Internet Key Exchange Vulnerability Enquiry

Marvin Rhoads — Wed, 03 Apr 2013 02:46:18 GMT

You are not affected by this vulnerability.

As the notice states - "There are no affected 12.4 based releases" and "There are no affected 15.0 based releases".

Cisco IOS Software Internet Key Exchange Vulnerability Enquiry

yenaungoo — Thu, 04 Apr 2013 03:43:47 GMT

Thanks, Marvin.

topic Cisco IOS Software Internet Key Exchange Vulnerability Enquiry in Network Security

Cisco IOS Software Internet Key Exchange Vulnerability Enquiry

Vulnerable Products

Cisco IOS Software Internet Key Exchange Vulnerability Enquiry

Cisco IOS Software Internet Key Exchange Vulnerability Enquiry