Data Center (SLX)

Expand all | Collapse all

Meltdown and Spectre (VN 2018-001 & VN 2018-002)

  • 1.  Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 01-05-2018 16:15
    Hello everyone!
    Extreme has published Vulnerability Notices to provide information on two issues known as Meltdown and Spectre.

    VN 2018-001 (CVE-2017-5715, CVE-2017-5753 - Spectre)
    VN 2018-002 (CVE-2017-5754 - Meltdown)

    At this time, susceptibility to each of these issues is actively being investigated and there isn't much content in either VN. We will continue to update them (and this topic) as more information becomes available.

    You can read more about these two attacks on the CERT website: https://www.kb.cert.org/vuls/id/584653


  • 2.  RE: Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 01-05-2018 17:47
    Hello Drew,
    Thank you for updating those two notices.



  • 3.  RE: Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 01-10-2018 16:27
    What is the timeline for updating these vulnerabilities on appliances like Extreme Management Center and NAC?


  • 4.  RE: Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 01-10-2018 16:27
    The information on this from various groups is being compiled now. Risk for all of these systems appears to be very low. We'll have better updates soon.


  • 5.  RE: Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 01-11-2018 19:40
    I've updated both of these VNs with preliminary information. Links above in the original post.


  • 6.  RE: Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 01-11-2018 19:40
    Hi Drew,
    Thank you so much for your update.

    Do we have any reason why we leave cell empty on "Meltdown Vulnerability Present" of ExtremeWireless and ExtremeWireless WiNG only?



    Best regards


  • 7.  RE: Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 01-11-2018 19:40
    The information that I was provided didn't have that section filled in and I wanted to get it published. We'll update it as everything continues to come together. There's a lot of people looking at this issue, both internally and externally.


  • 8.  RE: Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 01-11-2018 19:40
    Hi Drew,
    Thank you so much for your reply.

    Best regards


  • 9.  RE: Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 01-12-2018 04:58
    Thanks for your update Drew! My customer was happy because no impact to his Extreme product


  • 10.  RE: Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 01-12-2018 06:54
    Whats about the legacy Enterasys gear:

    S- / K -Series ? SecureStack Switches

    It would be nice to find them in above tables (and see that there is no issue).


  • 11.  RE: Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 01-12-2018 06:54
    I'm working on getting that for everyone.


  • 12.  RE: Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 01-12-2018 06:54
    Are there any updates for the legacy Enterasys N series switch chassis?
    Or do they fall under the non-vulnerable list as the other series?


  • 13.  RE: Meltdown and Spectre (VN 2018-001 & VN 2018-002)

    Posted 06-27-2018 17:57
    Hello,

    are there any news regarding the VNs for XMC?

    Best regards
    Stephan