CISCO-SA-IOSXE-MNTC-DOS-LZWEQCYQ

Vulnerable Products:

At the time of publication, this vulnerability affected Cisco IOS XE Software if it supported the start maintenance command.

For information about which Cisco software releases are vulnerable, see the Fixed Software ["#fs"] section of this advisory. Determine Whether the start maintenance Command Is Supported To determine whether the start maintenance command is supported, enter the start maintenance command on the CLI. If the output indicates the command is not recognized, the device does not support the start maintenance command and is not affected by this vulnerability.Products Confirmed Not Vulnerable:

Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by this vulnerability.

Cisco has confirmed that this vulnerability does not affect the following Cisco products:

IOS Software IOS XR Software NX-OS SoftwareWorkarounds:

There is a workaround that addresses this vulnerability. Set the privilege level of the start maintenance command manually by connecting to the device management CLI and using the privilege exec level 15 start maintenance configuration command, as shown in the following example:

Router# configuration terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# privilege exec level 15 start maintenance

While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment.Fixed Software:

Cisco considers...