When upgrading between major releases, you must be especially careful to make certain that no known bugs will prevent the new software from working properly in your environment. Customers with service contracts may upgrade to any software release, but must, as always, remain within the boundaries of the feature sets they have purchased. In general, customers without service contracts will be restricted to upgrading within a single row of the table above, except when no upgrade within the same row is available in a timely manner. The third party's announcement included sufficient information to allow any computer-literate person with a moderate interest in security to exploit the vulnerability. Customers should assume that any potential attacker is likely to know that this vulnerability exists, and furthermore is likely to know how to exploit the vulnerability.
Minimal skill is required.
No special equipment is required. Despite specifically inviting such reports, Cisco has received no actual reports of malicious exploitation of this vulnerability. This is a final field notice. Although Cisco cannot guarantee the accuracy of all statements in this notice, all the facts have been checked to the best of our ability. Cisco does not anticipate issuing updated versions of this notice unless there is some material change in the facts.