What is "pre-release-485" PSIRT?

[wdansuwa]

I generated Product Alerts report for my customer and see that "pre-release-485" alerts are found with no Alert Definition URL. Its first publish date is 2014-Jun-05. Not sure if anyone has info? This alert is categorized as vulnerable. 

Alert ID	Vulnerability	Alert Description	Alert Definition URL	First Published Date	Last Published Date	Item Type	Product Family	Product ID
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750 Series Switches	WS-C3750G-48TS-E
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750 Series Switches	WS-C3750G-48TS-E
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750 Series Switches	WS-C3750G-48TS-S
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750 Series Switches	WS-C3750G-48TS-S
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750-X Series Switches	WS-C3750X-48T-S
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750-X Series Switches	WS-C3750X-48T-S
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750-X Series Switches	WS-C3750X-24T-E
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750-X Series Switches	WS-C3750X-24S-E
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750-X Series Switches	WS-C3750X-24T-E
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750-X Series Switches	WS-C3750X-24S-E
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750-X Series Switches	WS-C3750X-24T-E
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750-X Series Switches	WS-C3750X-24S-E
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750-X Series Switches	WS-C3750X-24T-E
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750-X Series Switches	WS-C3750X-24S-E
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco 3800 Series Integrated Services Routers	CISCO3845
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco 3800 Series Integrated Services Routers	CISCO3845
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco 2800 Series Integrated Services Routers	CISCO2811
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco 2800 Series Integrated Services Routers	CISCO2811
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco 2800 Series Integrated Services Routers	CISCO2811
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco 2800 Series Integrated Services Routers	CISCO2811
485	Vulnerable	pre-release-485	Not Available	2014-Jun-05	2014-Jul-23	Chassis	Cisco Catalyst 3750-X Series Switches	WS-C3750X-48T-S

BTW, can anyone let me know what's the true definition of "Vulnerable" and "Potentially Vulnerable" in the report? Thank you very much. 

[Chris Camplejohn · Accepted solution]

I don't have the answer about pre-release, so I'll let someone from SNTC team answer that.  But I can answer what Vulnerable and Potentially Vulnerable means:

Vulnerable:  A host is Vulnerable if the software and configuration of the host has been determined to be affected by the Security Advisory. Note any caveats provided.

Potentially Vulnerable: A host is Potentially Vulnerable if some of the host's inventory or configuration information is missing or invalid. This could be caused by issues with the data collection, the host itself, the analysis of the data, or an unknown OS version. Therefore, it is not possible to be sure of the host's vulnerability and manual verification of the vulnerability may be required.

[Chris Castle]

Edit:

Question: Is this the report as you downloaded it, or is it the report from the customer perspective?

-Chris

[wdansuwa]

Hi Chris, it's the report as I downloaded it. 

[wdansuwa]

Thank you very much for clear definition :)