CSCvn20358 - Cisco IOS XE Software Web UI Command Injection Vulnerability

[eng_ahbadawi]

my knowledge in Cisco is not Soled so, please I would like to know with a simple way which of my devices is infected?

and where to download the update knowing that I do not have current service agreement with Cisco.

[Leo Laohoo]

Read Cisco IOS XE Software Web UI Command Injection Vulnerability, scroll down to the "Customers Without Service Contracts" section and read the first two paragraphs.

[User404]

Hi,

here you can see the affected Product IDs (scroll below).
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot

If a product ID matches, then click on the Cisco Bug ID, it will show you which knowen affected IOS versions exist and which IOS have the fix.

Hope this helps!

Cheers,

Andre