CSCvg97965 - Side Channel Analysis vulnerability - M3 B- and C-series servers UCSM managed - 3

[Dutchie]

Please explain why only the following versions are listed as "affected".  It seems fairly clear that the vulnerability would affect all versions that do not included the updated microcode, and therefore the affected versions list should be a lot longer, and should certainly include the most recent releases....

not just:

2.2(1b)B

2.2(1b)C

3.1(1e)B

3.1(1e)C

3.2(1d)B

3.2(1d)C

[Leo Laohoo]

It is better to read the Cisco Security Advisory bulletin called CPU Side-Channel Information Disclosure Vulnerabilities because there are more details and it is regularly updated.  

The details in the Bug ID can sometimes be "outdated".