FWSM multi-context and vulnerabilities

[vaibhav.gurav]

Hi,

I have a query regarding FWSM blade operation in multi-context mode and vulnerabilities. FWSM OS version is 3.2(18). This version is vulnerable to Cisco bug ID CSCtl84952. Only one of the context uses SCCP inspection . As per Cisco site successful exploitation of this vulnerability may cause a reload of the affected device. Repeated exploitation could result in a sustained denial of service condition.

Can successfull exploitation of this vulnerabilty in a normal context result in impact to the FWSM module as a whole ( i.e. all the other contexts)?

Regards

Vijay Sequeira

[mirober2]

Hi Vijay,

Yes, if the vulnerability was exploited in one context, the entire firewall module would reload. This would affect other traffic flowing through other contexts.

You should schedule an upgrade to the latest 3.2.x maintenance release when possible.

Hope that helps.

-Mike