for Cisco Catalyst 9300 Series Switches

Improvements

• ASAc Firewall-Application Hosting

Application hosting on Cisco Catalyst 9300 Series Switches is integrated with the Cisco Adaptive Security Virtual Appliance (ASAc) for the stateful inspection of traffic in a network without changing the network architecture. The app-hosting infrastructure on these Catalyst switches can seamlessly add the ASAc instances to the existing network without any additional hardware.

Bug fixes

CSCwh87343 - All models Cisco IOS XE Software Web UI Privilege Escalation Vulnerability
For more information, see Security Advisory: cisco-sa-iosxe-webui-privesc-j22SaA4z.
CSCwe35651 - All models False hotspot temperature alerts indicating RED threshold has been exceeded
CSCwh51416 - C9300LM C9300LM - GLC-TE is not working
CSCwh24851 - C9300L Catalyst 9300L switch reports Stack Adapter Authentication Failure
CSCwh10596 - All models High CPU observed in Fed main after switchover

Open problems

CSCwf62551 - (C9300X) interop:Ports are not coming up between 9300X-Uplink and 9500X with "100G QSFP 100G CU3M"
CSCwh35728 - Need switch to host macsec support in Sda overlay network