CVE-2018-0101 Patch

[keithcclark71]

Hi we have a PCI compliance scan flagging on this CVE-2018-0101 vulnerability. The issue I have is how to resolve? Can someone assist here as the firewall in question I believe is out of smartnet support. It's pretty ridiculous if you need that support in place to download a patch. Has anyone come accross this one and how did you remediate? Thanks for any help here as I can't find anything on the net as to how to resolve so the scan can pass. The ASA is running 9.15(1)

[Seb Rupik]

Hi there,

At the bottom of the security advisory page : https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180129-asa1

...see the section about 'customers without service contracts' and get ready to contact TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html

Your question about software updates without a contract is fairly common and this is the usual advice you will get on the forum. Most of the time people report back that TAC has offered up a software binary. Good luck!

cheers,

Seb.