SNMP Remote Code Execution Vulnerabilities in Cisco IOS

[ironjlabay1]

Hello,

Looking for the correct IOS version for 2960-L series switches that resolves the SNMP vulnerabilities detailed in the advisory. Cisco IOS checker this is resolved in 15.2(5)E2b but I cannot find this version to download. Is this available?

Thanks in advance!

[Marvin Rhoads]

Are you sure your switch is affected?

What IOS version are you currently running and which BugID mentioned in the advisory below applies?

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp

[ironjlabay1]

We have 15.2(5)E1

Attached is the Cisco IOS Software Checker output.

Cisco recommended combined first fix - 15.2(5)E2b

Thanks!

[Marvin Rhoads]

It appears Cisco hasn't quite released that version yet.

You can either monitor the product downloads page for when it comes out or else open a TAC case to see when you can expect it.

[Rabin Khadgi]

Did you open a ticket with TAC or decided to wait for IOS release?

Thanks,

Rabin