CSCvp92098 - Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability - 1

[tmoore]

Where can I get the 8.5.151.10 release that is shown in the fixed releases?  On the download page for the 5508 WLC there is a warning not to upgrade to 8.5.160.0 if you have 2800 AP's with Flexconnect. I'm just running the 8.5.151.0 release.  Is this a fixed release or do I need the .10 release?

[Leo Laohoo]

Do you have 2800/3800 running Flexconnect?
If you don't, then use 8.5.160.0.

[tmoore]

CONTROLLED


Yes I have 2802i APs configured with Flexconnect

[Leo Laohoo]

Raise a TAC Case and ask them to publish the engineering release that contains the fix version.