07-25-2017 10:49 PM
Hello,
i just tried the IOS checker calls in the CERT API.
When using the normal web page i get sometimes an output that says "combined fix" which is pretty useful.
I don't receive it in the XML it seems, will it be included someday or is there a hint to get this ?
08-01-2017 01:00 PM
Hi Klohse,
The results currently does not provide the combined results. I have entered an enhancement request for this. However, this probably can help you. You can use the first_fixed filter, as shown below (using the openVulnQuery python-based client):
bash-3.2$ openVulnQuery --ios 15.5\(2\)T -f first_fixed
For example, you can display each advisory and all the first fixed versions and then see which one is the most recent version that includes all fixes. It's not perfect, but it will get you the data in the meantime.
bash-3.2$ openVulnQuery --ios 15.5\(2\)T -f advisory_id first_fixed [ { "advisory_id": "cisco-sa-20170629-snmp", "first_fixed": [ "15.6(1)T3" ] }, { "advisory_id": "cisco-sa-20170419-energywise", "first_fixed": [ "15.6(1)T3" ] }, { "advisory_id": "cisco-sa-20170322-dhcpc", "first_fixed": [ "15.6(1)T3", "15.6(2)T2" ] }, { "advisory_id": "cisco-sa-20170322-l2tp", "first_fixed": [ "15.6(1)T3", "15.6(2)T1" ] }, { "advisory_id": "cisco-sa-20160928-aaados", "first_fixed": [ "15.5(2)T4" ] }, { "advisory_id": "cisco-sa-20160928-dns", "first_fixed": [ "15.5(2)T4" ] }, { "advisory_id": "cisco-sa-20160928-h323", "first_fixed": [ "15.5(2)T4" ] }, { "advisory_id": "cisco-sa-20160928-ios-ikev1", "first_fixed": [ "15.5(2)T4" ] }, { "advisory_id": "cisco-sa-20160928-msdp", "first_fixed": [ "15.5(2)T4" ] }, { "advisory_id": "cisco-sa-20160916-ikev1", "first_fixed": [ "15.6(1)T3", "15.6(2)T2" ] }, { "advisory_id": "cisco-sa-20160525-ipv6", "first_fixed": [ "15.5(2)T4" ] }, { "advisory_id": "cisco-sa-20160323-ios-ikev2", "first_fixed": [ "15.5(2)T3" ] }, { "advisory_id": "cisco-sa-20151021-ntp", "first_fixed": [ "15.5(2)T4" ] }, { "advisory_id": "cisco-sa-20150408-ntpd", "first_fixed": [ "15.5(2)T2" ] }, { "advisory_id": "cisco-sa-20150320-openssl", "first_fixed": [ "15.5(2)T1" ] }, { "advisory_id": "cisco-sa-20150310-ssl", "first_fixed": [ "15.5(2)T1" ] }, { "advisory_id": "Cisco-SA-20150113-CVE-2015-0204", "first_fixed": [ "15.5(2)T1" ] } ]
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide