FTD Software Upgrade - 7.0.4

[Gibson2010]

Hi all,

Looking to upgrade our 2110 FTD from 7.0.4 to 7.0.6.2.

Do I need upgrade to 7.0.6 first and then to 7.0.6.2?

I noticed the software download for both 7.0.6 and 7.0.6.2 were about the same size.

However the FMCv 7.0.6.2 was half the size of 7.0.6.

[Leo Laohoo]

I think you need to go higher than that. 

Cisco Event Response: Attacks Against Cisco Firewall Platforms

1.  Cisco Adaptive Security Appliance and Firepower Threat Defense Software Web Services Denial of Service Vulnerability

2.  Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability

#1 & #2 are currently being actively exploited in the wild.  

Exploitation and Public Announcements

Cisco has confirmed that this vulnerability has been exploited. Cisco strongly recommends that customers upgrade to fixed software to resolve this vulnerability. Customers are also strongly encouraged to monitor system logs for indicators of undocumented configuration changes, unscheduled reboots, and any anomalous credential activity.

---

Further reading:

• CISA Adds Three Known Exploited Vulnerabilities to Catalog
• ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices

[Gibson2010]

Thanks, the 7.0.6.2 is the patch for ArcaneDoor

[Marvin Rhoads · Accepted solution]

To move to 7.0.6.2 you must first upgrade to 7.0.6.

[Gibson2010]

Thanks Marvin for confirming