Cisco Bug ID-CSCvb29204 in CISCO2921/K9 router

[preetpeethambaran]

Hi,

We had an internal vulnerability scan done on network devices, & as part of the vulnerability report, there is a finding of "Cisco IOS IKEv1 Packet Handling Remote Information Disclosure  - Upgrade to the relevant fixed version referenced in Cisco bug ID -CSCvb29204" on Cisco 2921 Router.

Currently, Cisco 2921 router is currently running on Version 15.2(4)M6. Please let me know how to mitigate  this vulnerability

[marce1000]

 - By upgrading to one of the fixed version(s) mentioned in the bug report.

   M.

[julian.bendix]

Hi,

the answer was already in your question:

Upgrade to the relevant fixed version referenced in Cisco bug ID -CSCvb29204" on Cisco 2921 Router.

Best regards
Julian

[preetpeethambaran]

Hi,

Can you please share the link for bug report, as I am not able to find fixed release details.

[marce1000]

 https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb29204/?rfs=iqvred

 M.

[julian.bendix]

Hi!

Do you have access here?

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb29204/?rfs=iqvred

List of known fixed releases is quite long.
According to cisco.com, current recommended release for Cisco 2921 is 15.7.3M5(MD).

Hope that helps
Julian

P.S. please always mark helpful replies or solution if applicable

[wilson84]

What is there with this cisco indication, only update but does not solve the vulnerability.

URL: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb29204

Cisco will release software updates that address this vulnerability. There are no workarounds that address this vulnerability.