Contents

Introduction

Software Fix Delivery

Full IOS XE Image - Overview

IOS XE Software Maintenance Upgrade (SMU) - Overview

Full IOS XE Image - Detailed Breakdown

Routing/SDWAN

Switching

Wireless

IOT Switching

IOT Routing

Service Provider (Aggregation and Pre-Aggregation Routing)

IOS XE Software Maintenance Upgrade (SMU) - Detailed Breakdown

Routing

Switching

Wireless

My Notifications service

Introduction

This document describes a comprehensive list of software versions that have incorporated fixes for Cisco IOS® XE Software Web UI Privllege Escalation Vulnerability (CVE-2023-20198) - Cisco bug ID CSCwh87343.

The security advisory can be viewed here:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z

Note: This document is dynamic and subject to updates as new fixed software versions become available.

Software Fix Delivery

The software fix is being delivered through either a full IOS XE software image or an IOS XE Software Maintenance Upgrade (SMU) package.

Only products listed in the "IOS XE Software Maintenance Upgrade (SMU) - Detailed Breakdown" section of this document have the SMU package released for Cisco bug ID CSCwh87343.

If no SMU package is available for the specific product or currently used IOS XE version the software upgrade to the fixed version using a full IOS XE image must be performed.

Example #1:

On Catalyst 9200 Series Switch which currently runs IOS XE version 17.9.4 the fix for Cisco bug ID CSCwh87343 can be applied twofold:

1) full IOS XE image upgrade to version 17.9.4a

or

2) SMU package installed on the currently used version 17.9.4 (Reload Required)

Example #2:

On Catalyst 9200 Series Switch which currently runs IOS XE version 17.9.2 the fix for Cisco bug ID CSCwh87343 should be applied through a full IOS XE image upgrade to version 17.9.4a.

Full IOS XE Image - Overview

The full IOS XE image versions are published for Extended Maintenance releases as described in this table.

Estimated release dates are provided in Pacific Time (UTC-7).

Full IOS XE image version

[Base Release + CSCwh87343 fix]

Base Release

Routing/SDWAN

Switching

Wireless

IOT

SP Access and Pre -Aggregation Router

17.9.4a

17.9.4

Published

Published

Published

Published

Published

17.6.6a

17.6.6

Published

Published

Published

Published

Published

17.6.5a

17.6.5

Published

N/A

N/A

N/A

N/A

17.3.8a

17.3.8

Published

Published

Published

Published

Published

16.12.10a

16.12.10

N/A

Published (Cat3850/3650 only)

N/A

N/A

N/A

17.12.2

17.12.2

Published

Published

Published

Published

Published

IOS XE Software Maintenance Upgrade (SMU) - Overview

The Reload Required SMU packages are published for specific Extended Maintenance releases as described in this table.

Estimated release dates are provided in Pacific Time (UTC-7).

For other releases, please upgrade to full CCO images posted with the fix

SMU version

(Reload Required)

[CSCwh87343 fix]

Base Release

Routing

Switching

Wireless

17.9.4 SMU

17.9.4

Published

Published

Published

17.9.3 SMU

17.9.3

N/A

Published

Published

17.9.3a SMU

17.9.3a

Published

N/A

N/A

17.6.5 SMU

17.6.5

Published

Published

Published

General Software Maintenance Upgrade restrictions and installation steps are documented in this configuration guide:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-9/configuration_guide/sys_mgmt/b_179_sys_mgmt_9300_cg/software_maintenance_upgrade.html

Software Maintenance Upgrade information specific to Catalyst 9800 can be found in the 9800 configuration guide

Full IOS XE Image - Detailed Breakdown

This table lists the affected producs and the date when the full IOS XE images are available for download:

Routing/SDWAN

Platform

17.9.4a

17.6.6a

17.3.8a

ASR1K -RP2/RP3

22 Oct 2023

28 Oct 2023

30 Oct 2023

ASR1K-1X

22 Oct 2023

28 Oct 2023

30 Oct 2023

ASR1K-2X

22 Oct 2023

28 Oct 2023

30 Oct 2023

ASR1K -1HX/2HX

22 Oct 2023

28 Oct 2023

30 Oct 2023

Catalyst 8500

22 Oct 2023

28 Oct 2023

30 Oct 2023

Catalyst 8500L

22 Oct 2023

28 Oct 2023

30 Oct 2023

Catalyst 8200, 8300

22 Oct 2023

28 Oct 2023

30 Oct 2023

Catalyst 8200L

22 Oct 2023

28 Oct 2023

30 Oct 2023

Catalyst 8000V

22 Oct 2023

28 Oct 2023

30 Oct 2023

ISR4461

22 Oct 2023

28 Oct 2023

30 Oct 2023

ISR4431, ISR4451

22 Oct 2023

28 Oct 2023

30 Oct 2023

ISR4300

22 Oct 2023

28 Oct 2023

30 Oct 2023

ISR4200

22 Oct 2023

28 Oct 2023

30 Oct 2023

ISR1100

22 Oct 2023

28 Oct 2023

30 Oct 2023

VG400

22 Oct 2023

28 Oct 2023

30 Oct 2023

VG410

22 Oct 2023

28 Oct 2023

30 Oct 2023

VG420

22 Oct 2023

28 Oct 2023

30 Oct 2023

VG450

22 Oct 2023

28 Oct 2023

30 Oct 2023

1100 Terminal Services Gateway

22 Oct 2023

28 Oct 2023

30 Oct 2023

Switching

Platform

17.9.4a

17.6.6a

17.3.8a

16.12.10a

Catalyst 9300, 9300L, 9400, 9500, 9600

23 Oct 2023

26 Oct 2023

30 Oct 2023

N/A

Catalyst 9200, 9200L, 9200CX

23 Oct 2023

26 Oct 2023

30 Oct 2023

N/A

Catalyst 3850, 3650

N/A

N/A

N/A

29 Oct 2023

Wireless

Platform

17.9.4a

17.6.6a

17.3.8a

Catalyst 9800-L

23 Oct 2023

26 Oct 2023

30 Oct 2023

Catalyst 9800-CL

23 Oct 2023

26 Oct 2023

30 Oct 2023

Catalyst 9800-40, 9800-80

23 Oct 2023

26 Oct 2023

30 Oct 2023

EWC

23 Oct 2023

26 Oct 2023

30 Oct 2023

IOT Switching

Platform

17.9.4a

17.6.6a

17.3.8a

IE3100

22 Oct 2023

26 Oct 2023

30 Oct 2023

ESS 3300

22 Oct 2023

26 Oct 2023

30 Oct 2023

IE9300, ESS9300

22 Oct 2023

26 Oct 2023

30 Oct 2023

IE3400H, IE3400, IE3300, IE3200

22 Oct 2023

26 Oct 2023

30 Oct 2023

IOT Routing

Platform

17.9.4a

17.6.6a

17.3.8a

IR1821, IR1831, IR1833, IR35

22 Oct 2023

26 Oct 2023

30 Oct 2023

ESR6300

22 Oct 2023

26 Oct 2023

30 Oct 2023

IR8340

22 Oct 2023

26 Oct 2023

30 Oct 2023

IR8140

22 Oct 2023

26 Oct 2023

30 Oct 2023

IR1101

22 Oct 2023

26 Oct 2023

30 Oct 2023

Service Provider (Aggregation and Pre-Aggregation Routing)

Platform

17.9.4a

17.6.6a

17.3.8a

ASR900 RSP3

23 Oct 2023

26 Oct 2023

30 Oct 2023

ASR900 RSP2

23 Oct 2023

26 Oct 2023

30 Oct 2023

ASR920

23 Oct 2023

26 Oct 2023

30 Oct 2023

NCS520

23 Oct 2023

26 Oct 2023

30 Oct 2023

NCS4201

23 Oct 2023

26 Oct 2023

30 Oct 2023

NCS4202

23 Oct 2023

26 Oct 2023

30 Oct 2023

NCS4216

23 Oct 2023

26 Oct 2023

30 Oct 2023

NCS4206

23 Oct 2023

26 Oct 2023

30 Oct 2023

IOS XE Software Maintenance Upgrade (SMU)  - Detailed Breakdown

This table lists the affected producs and the date when the Reload Required SMU packages are available for download:

Routing

Platform

17.9.4 SMU

17.9.3a SMU

17.6.5 SMU

ASR1K -RP3

24 Oct 2023

31 Oct 2023

N/A

ASR1K-1X

24 Oct 2023

31 Oct 2023

28 Oct 2023

ASR1K-2X

24 Oct 2023

31 Oct 2023

28 Oct 2023

ASR1K -1HX/2HX

24 Oct 2023

31 Oct 2023

28 Oct 2023

Catalyst 8500

24 Oct 2023

31 Oct 2023

28 Oct 2023

Catalyst 8500L

24 Oct 2023

31 Oct 2023

28 Oct 2023

Catalyst 8200, 8300

24 Oct 2023

31 Oct 2023

28 Oct 2023

Catalyst 8200L

24 Oct 2023

31 Oct 2023

28 Oct 2023

Catalyst 8000V

24 Oct 2023

31 Oct 2023

28 Oct 2023

ISR4461

24 Oct 2023

31 Oct 2023

28 Oct 2023

ISR4431, ISR4451

24 Oct 2023

31 Oct 2023

28 Oct 2023

ISR4300

24 Oct 2023

31 Oct 2023

28 Oct 2023

ISR4200

24 Oct 2023

31 Oct 2023

28 Oct 2023

ISR1100

24 Oct 2023

31 Oct 2023

28 Oct 2023

Switching

Platform

17.9.4 SMU

17.9.3 SMU

17.6.5 SMU

Catalyst 9300, 9300L, 9400, 9500, 9600

24 Oct 2023

30 Oct 2023

26 Oct 2023

Catalyst 9200, 9200L, 9200CX

24 Oct 2023

30 Oct 2023

26 Oct 2023

Wireless

Platform

17.9.4 SMU

17.9.3 SMU

17.6.5 SMU

Catalyst 9800-L

24 Oct 2023

30 Oct 2023

26 Oct 2023

Catalyst 9800-CL

25 Oct 2023

30 Oct 2023

26 Oct 2023

Catalyst 9800-40, 9800-80

25 Oct 2023

30 Oct 2023

26 Oct 2023

EWC

25 Oct 2023

30 Oct 2023

26 Oct 2023

My Notifications service

Customers can use My Notifications service to get notified about updates to Cisco bug ID CSCwh87343.

These instructions describe how to create a subscription.

1. Click "Track a Bug" link

2. Enter bug ID: CSCwh87343 , set frequency of notifications (daily/weekly/monthly) and confirm the email address to be used.

3. Click "Track a Bug" button.