Cisco IOS XE Software Web UI Privilege Escalation Vulnerability

Resolved Bugs

CSCwh87343 - Cisco IOS XE Software Web UI Privilege Escalation Vulnerability. For more information, see Security Advisory: cisco-sa-iosxe-webui-privesc-j22SaA4z

Open Bugs

CSCwd39257 - IOS-XE cpp crash when entering no ip nat create flow-entries.
CSCwe85301 - Crypto PKI-CRL-IO_0 process crash when PKI trustpoint is being deleted.
CSCwf41492 - NHRP BFD flaps randomly with dynamic tunnel (NHRP phase 3) in DMVPN.
CSCwf16332 - HSRP loss communication with HSRP neighbor after two weeks of being configured.
CSCwe14885 - VPN is established although the peer is using a revoked certificate for authentication.
CSCwc86434 - Static NAT DIA inside static routes being advertised over OMP to remote sites.
CSCwf34171 - Configure replace command fails due to the license udi PID XXX SN:XXXX line on IOS-XE devices.
CSCwd17272 - UTD packet drop due to fragmentation for ER-SPAN traffic.
CSCwf41450 - Device reloads changing the resource profile.
CSCwf52751 - CLI template fails to attach to device with error access-denied.
CSCvz82148 - %CRYPTO_SL_TP_LEVELS-6-VAR_NEW_VALUE message is observed in each write config with same crypto value.
CSCwf55243 - Device is crashing while adding a trustpoint to the router.
CSCwe95072 - Unexpected reload due to memory corruption when modifying and access list.
CSCwf03193 - Device crash with crashinfo files were generated with segmentation fault, process IPSEC key engine.
CSCwf11394 - IOS XE - debug log should mention port-hop and reason prior to DISTLOC.
CSCwf00276 - Packets with L2TP headers cause device to crash.
CSCwf60120 - Static NAT entry gets deleted from running config; but remains in startup config.
CSCwf61720 - No licenses in use after upgrading from traditional to smart licensing IOS-XE versions.
CSCwe51910 - SNMP if index persist does not work.
CSCwf24164 - Netflow stops working when flow monitor reaches cache limit.
CSCwd61988 - Output packet bytes calculation biased when we enable QoS on port channel.
CSCwf25735 - QoS more than four remark with set-cos not work.
CSCwf51206 - EVPN: BUM traffic is not flooded to bridge domain interface.