As part of our vulnerability tests, we have been unable to confirm
that
the smaller catalyst switches running IOS but without L3 capability
are
vulnerable. They don't seem to react in a negative way to the same
attacks that lock up the other devices we have tested. Has anyone
else
been able to verify this one way or the other?
I tested Catalyst 2924-XL-EN with 12.0(5)WC5a and I found that without
L3 capability it does not seem to be affected. But with L3
connectivity, if you direct the attack at the VLAN1 interface it is
definitely susceptible.
I've tested 12.0(5)WC8 and it has the fix.
--steve