CSCum35502 Bug Vulnerable releases

[ITforever]

Hello,

I am wondering if the version 6.2.6 on N7Ks is vulnerable?

According to this link, the first fixed release is 6.2.16 and hence, 6.2.6 is vulnerable:

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-nxaaa

According to this link, the 6.2.5 is the only affected release and 6.2.6 is not in the list of the fixed releases:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCum35502

Any clarification is much appreciated.

Thanks

[Rob Huffman]

Hi there,

In the Cisco Bug notes as you linked above CSCum35502 they don't list all the affected releases and usually only list the "first found in" releases that is why only 6.2.5 is shown. In this case (and many others) you need to go with the tech notes that list the "First fixed-in" versions for the affected products which in your case is 6.2.16. 

So, yes, 6.2.6 would be a vulnerable version.

Cheers!

Rob

[ITforever]

Thanks, Rob. Very helpful.