Cisco Secure Web Appliance CVE-2022-20867/20868 vulnerability upgrade

[hadzic.ivan]

Hello, we received Cisco's recommendation regarding CVE-2022-20867 and CVE-2022-20868 vulnerabilities ( from the following link https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esasmawsa-vulns-YRuSW5mD?emailclick=CNSemail ) to upgrade Cisco SWA AsyncOS version from 14.5.0 (at the moment we have 14.5.0-537) to 14.5.1, but  the last Release notes update is from October 14th, 2022 for the Build number 14.5.0-673 which was described as AsyncOS 14.5 Hot Patch 1 for Cisco Secure Web Appliance. Could someone confirm if there is AsyncOS for SWA version 14.5.1, or is the last officialy available version 14.5.0-673 HP release?

Thanks, regards.

[Milos_Jovanovic]

Hi @hadzic.ivan,

Yes, you are right - latest SWA release is indeed 14.5.0-537.

However, I believe the confusion is a matter of documentation interpretation. When I see something like that written in parenthesis, I usually interpret this like it is a new release, and expected release date is listed there. For this particular version, expectation is that 14.5.1 will be released in November 2022. For 14.0, expectation is that it will be released in January 2023.

Kind regards,

Milos

[amojarra]

Hi, 

14.5.1 is planned for early December, we cannot say for sure the exact date and time. 

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++