CSCwk61235 - Confirm if CVE-2024-6387 impacts Nexus 9000

[mahti-maghsoudi]

Hi. It also affects version 10.3.5(M)

[Leo Laohoo]

Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion)

[Ryan Rong]

Dear Experts,

The Known Fixed Releases is 10.5.
My question is how to fix the problem in 10.3. Because the recommended release still the 10.3.

Are there plans to release a patch in 10.3?
Thanks.

CSCwk61235 : Bug Search Tool (cisco.com)

Recommended Cisco NX-OS Releases for Cisco Nexus 9000 Series Switches - Cisco

[rkr]

Nexus 9000 Series Switches in standalone NX-OS mode CSCwk61235 ["https://tools.cisco.com/bugsearch/bug/CSCwk61235"] 10.2(9) (Jan 2025) 10.3(6) (Aug 2024) 10.4(4) (Oct 2024) 10.5(1) (Aug 2024)

[marinogr]

In Cisco Security Cisco Software Checker there is no CSCwk61235

for NX-OS 10.3(5) recomended version. Very disapointed from Cisco. Shoud we trust Cisco Security Cisco Software Checker.

It seems for recomended soft. fix it will be on August release 10.3.(6)

[marinogr]

Release 10.3(6) M is now available. In Cisco Software Checker there are no 10.3(6) M release.