Hi Experts,
Customer is asking whether their switch hit CVE-2018-0480 by showing the following result.
switch#show errdisable detect | include vlan
psecure-violation Enabled port/vlan
sgacl_limitation:multiple Enabled port/vlan <-!!!
I would like to know an errdisable detect for sgacl_limitation should be assessed for this vulnerability or not.
According to the document, affected features of vlan level errdisable are bpduguard and psecure-violation and security violation. If sgacl_limitation also be affected, how to verify port level configuration.
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-errdisable
Regards,
Hajime
