CSCun94946 - IOS Vulnerability in Zone Based Firewall vs Cisco 2960-X Switches

[Mukund M Deshpande]

Both devices are running with latest image but still  showing vulnerable.

cat4500e-universalk9.SPA.03.08.05a.E.152-4.

IOS: c2960s-universalk9-mz.150-2.SE11.bin

Kindly  suggest if these device are vulnerable.

WS-C4510R+E

 WS-X45-SUP7-E

C2960S-24PS-L

[Mukund M Deshpande]

[Mark Malone]

but it doesn't say its fixed in latest images ,it provides one image only its fixed in have you tried that release

Known Fixed Releases:
(1)
15.5(2.24)T

[sbhadrav@cisco.com]

when you check flash dir flash:  does it show an image name like below cat4500 if so post it please and can check what  the recommended latest image is for it

cat4500e-universalk9.SPA.03.08.05a.E.152-4.

https://software.cisco.com/download/release.html?mdfid=277241602&flowid=61384&softwareid=280805680&release=15.0.2-SG11&relind=AVAILABLE&rellifecycle=MD&reltype=latest

sup6 alright the next step up I see v 15.1 available

https://software.cisco.com/download/release.html?mdfid=281550478&flowid=61392&softwareid=280805680&release=15.2.2E6&relind=AVAILABLE&rellifecycle=MD&reltype=latest

[Mukund M Deshpande]

[Mukund M Deshpande]

We are running with  latest version and not able to  see any fix Caveats (CSCun94946)

Version 03.08.05a.E (Vulnerability in Zone Based Firewall)