CSCvw12895 - Cisco SD-WAN Software Packet Filtering Bypass Vulnerability

[BrianRoberson]

RE: CSCvw12895 - Cisco SD-WAN Software Packet Filtering Bypass Vulnerability

Does this impact IOS-XE routers running non SDWAN software?  The advisory reports to impact "SDWAN Routers" or "Cisco XE SD-WAN Routers".  Do we have a new classification of routers "XE" ?

Thanks.

[Leo Laohoo]

Read Cisco SD-WAN Software Packet Filtering Bypass Vulnerability.

According to this Security Bulletin:  

At the time of publication, this vulnerability affected Cisco IOS XE Software releases 17.2.1 and earlier and Cisco IOS XE SD-WAN Software releases 16.12.2r and earlier.

It affects routers running IOS-XE versions 17.2.1 and earlier as well as routers running SD-WAN firmware IOS-XE 17.12.2r and earlier. 

Still having doubt?  Raise a TAC Case raised and get written confirmation from Cisco.