CISCO-SA-SECBOOT-UQFD8AVC

Vulnerable Products:

These vulnerabilities affect the following Cisco products if they are running a vulnerable release of Cisco IOS XE Software.

The following table lists the affected hardware platform and first affected software release. Cisco Platform First Affected Release 1000 Series Integrated Services Routers 17.8.1 1100 Terminal Services Gateways 17.7.1 4000 Series Integrated Services Routers 17.3.1 8100 Series Secure Routers 17.15.1 8400 Series Secure Routers 17.12.1 ASR 1000 Series Aggregation Services Routers 17.7.1 C8375-E-G2 Platforms 17.15.3 Catalyst 8200 Series Edge Platforms 17.8.1 Catalyst 8300 Series Edge Platforms 17.8.1 Catalyst 8500L Edge Platforms 17.8.1 Catalyst 9200 Series Switches 17.8.1 Catalyst ESS9300 Embedded Series Switch 17.13.1 Catalyst IE3100 Heavy Duty Series Switches 17.17.1 Catalyst IE3100 Rugged Series Switches 17.12.1 Catalyst IR1100 Rugged Series Routers 17.13.1 Catalyst IR8100 Heavy Duty Series Routers 17.4.1 Catalyst IR8300 Rugged Series Routers 17.7.1 Catalyst IE9300 Rugged Series Switches 17.13.1 IE3500 Heavy Duty Series Switches 17.17.1 IE3500 Rugged Series Switches 17.17.1 VG410 Analog Voice Gateways 17.17.1 For more information about which Cisco software releases are vulnerable, see the Fixed Software ["#fs"] section of this advisory.Products Confirmed Not Vulnerable:

Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by these vulnerabilities.

Cisco has confirmed that these vulnerabilities do not affect the following Cisco products:

IOS Software IOS XR Software NX-OS SoftwareWorkarounds:

There are no workarounds that address these vulnerabilities.Fixed Software:

Cisco considers any workarounds and mitigations to be temporary solutions until an upgrade to a fixed software release is available. To fully...