> After upgrading to the latest version, one of my colleague do a mitigation check and it seems the vulnerabilities is still there. Well were they supposed to be fixed in that release (according to the advisories and bug details)? All security advisories have links to bug IDs which may be different for each platform. Check the advisory you're interested in then read the fixed versions of IOS for 3750-X to see whether it actually got fixed. If it's a recently released advisory/vulnerability then it probably will not have been fixed because the platform is end of support (sometimes you'll be lucky and it got fixed for some other platform still in support). You can't just upgrade and hope that everything is fixed.
If you want your network to be fully up to date and running software with old vulnerabilities fixed then you need to replace out of support kit with new models and keep the software up date while following the advisories.
