MX users running AnyConnect: it's upgrade time!

[CptnCrnch]

I always wanted to start with a controversial title here... 🙂

Looking at Cisco Meraki MX and Z3 Teleworker Gateway VPN Denial of Service Vulnerability, users running AnyConnect on MX / Z3 on

- 16.2 up to 16.16.5 or

- 17.x up to 17.10

are urged to upgrade because of a known Denial of Service in these versions.

[Brash]

Kudos purely for the title 🤣

It's in the link but figured it's also worth calling out that it's for CVE-2022-20933.

Makes it easier to look up later.

[jbright]

Is this bug fixed in the latest version of 18.x too?

That version is not listed on the security alert page.

[PhilipDAth]

This is gold.  I think I have a customer that may have been experiencing this.  They regularly get all AnyConnect users disconnected simultaneously.  Just one customer.

Can't wait to try this new firmware.

[Inderdeep]

Thanks buddy @CptnCrnch 

[BlakeRichardson]

@CptnCrnch  nice one. Unfortunately there isn't a badge for controversial titles. So I found you one.

[KarstenI]

Do we have to use this badge now on each topic that is somehow controversial? Asking for a friend …

[BlakeRichardson]

@MeredithW  Can hopefully answer that. 

[MeredithW]

actually, this maybe controversial here, but i'm partial to GIFs so: