topic Re: IOS software checker vs. CVRF in Services Discussions

IOS software checker vs. CVRF

Infosim — Fri, 30 Jun 2017 14:17:01 GMT

Hi,

I've noticed that the data provided by the IOS software checker sometimes is different from the data provided by the CVRF files. For example the CVRF of advisory cisco-sa-20151218-ios states that IOS 15.5(3)M1 is affected, but the software checker states, that it is not.

For my use case I don't need to check vulnerabilities for one or some IOS versions, but I want to know which versions are affected by a vulnerability so I have to rely on the CVRF files.

I think this is a known issue and wanted to ask if we can expect a solution soon?

Re: IOS software checker vs. CVRF

Omar Santos — Sat, 15 Jul 2017 00:38:53 GMT

Hi Stefan,

This is a known issue. The best course of action is to use the IOS Software checker integration with the API. CVRF files have limited support for software versions.

Re: IOS software checker vs. CVRF

CMurphy24 — Wed, 24 Apr 2019 11:34:55 GMT

This seems to be a known issue - I logged a TAC and received the following response:

In this case, I would suggest you to use the following Cisco IOS Software Checker since it is a reliable source from Cisco: https://tools.cisco.com/security/center/softwarechecker.x