{"text_format":"1","workbook":"xlsx","n_sheets":3,"sheets":["Note（说明）","Resolved Issues","Known Issues"],"not_rendered":{"charts":0,"images":1,"macros":1,"external_links":0,"defined_names":3,"comments":2,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Note（说明）","index":0,"n_rows":24,"n_cols":3,"rows_kept":24,"cut":false,"hidden":false,"merged":[[1,2,2,2],[3,2,4,2]]}
["Note",null,"使用指导"]
["Format","The issue title should use Title 4 style; the context should be \"Item List\"s that start with Symptom and Condition. For example:","★ 本工具用于从Release Notes导入问题单号（标题 4）及其中的Symptom、Condition字段"]
[null,"201409090165"]
[null,"·           Symptom: The switch reboots unexpectedly. ","◆ 操作方法：在“Resolved Issues”页面单击<Import Known&Resolved issues>"]
[null,"·           Condition: This symptom occurs when about 4K DHCP users come online or renew leases. "]
["1)","To use the <Import Known&Resolved issues> button, the Word document must have a paragraph (of Title 1 style) including string \"Open problem\" (it must be positioned before the \"resolved problem\" title). For example:","◆ 对导入文档的要求（请参考样例）："]
[null,"Open problems and workarounds","1.  必须有包含字符\"Open problem\"的标题 1（其内容将被导入到Know Issues表单）"]
["2)","and the document must have a paragraph (of Title 1 style) including string \"resolved problem\". For example: List of resolved problems","2.  必须有包含字符\"resolved problem\"的标题 1，通常名为：List of resolved problems"]
["3)","Must have Title 2 including \"resolved problem\". For example:","3.  必须有包含字符\"resolved problem\"的标题 2"]
[null,"Resolved problems in R1810P01"]
["Version","Developer: yingyong 08174"]
["V2.2","MsgBoxEx改用MsgBox，以支持2010以上版本的Word。2022-6-2"]
["V2.1","增加中文使用指导。 2018/9/27"]
["V2.0","\"Resolved Issues\"页面的<Clear List>按钮现在也清空\"Known Issues\"页面的列表。 2016/9/21\n解决了版本号可能出错的Bug：当Resolved problems（标题 2）下为None时，跳过不处理"]
["V1.9","<Import known issues> button is combined with <Import resolved issues>.  2016/8/4"]
["V1.8","<Import resolved issues> also imports \"Fixed in version\" in column D.\nAfter a Word file is imported, this Excel will be saved as the same filename.  2016/6/29"]
["V1.7","When importing multiple Symptoms, repeat the issue title (Bug ID) in Excel.  2016/6/22"]
["V1.6","If column A has redundant rows, auto delete it.  2016/6/22"]
["V1.5","Support importing the issue that contains multiple Symptom & Condition. \nSupport importing all kind of issue title.  2016/6/21"]
["V1.4","Compatible with • Symptoms / • Conditions. (Normally they all use single form.)"]
["V1.3","If the next paragraph of \"Open problems and workarounds\" contains \"None\", \"Import known issues\" will import nothing. 2016/6/17"]
["V1.2","Add button \"Import known issues\" and \"Clear List\" for worksheet \"Known Issues\". 2016/6/16"]
["V1.1","\"Import Issues\" button supports title include \"\\\", e.g. 201307060098\\LSV7D009283"]
["V1.0","Add button \"Import Issues\" and \"Clear List\" for worksheet \"Resolved Issues\""]

{"sheet":"Resolved Issues","index":1,"n_rows":435,"n_cols":5,"rows_kept":435,"cut":false,"hidden":false,"merged":[]}
["Bug ID","Symptom","Condition","Fixed in version","CMS Case ID"]
["202303021705","The switch fails to forward PTP packets.\r\r","This symptom occurs if PIM-DM and IGMP are configured on the switch.\r\r","R3507P10"]
["202212141432","A port might not come up.\r\r","This symptom occurs if a 10-GE copper port operates at 1000 Mbps.\r\r","R3507P09"]
["202209030500","The switch prints a log message that CRC errors packets were received. \r\r","This symptom occurs if the following operations are performed:  \r\r\n(1) Enable flow sampling and specify the number of packets out of which flow sampling samples a packet in Ethernet interface view. \r\r\n(2) The packets received on the interface are sent to the CPUs of other IRF member devices through IRF physical links. \r\r","R3507P09"]
["202208111206","PIM packets cannot be forwarded at Layer 2.  \r\r","This symptom occurs if IGMP snooping is enabled.\r\r","R3507P09"]
["202208100206","The system might prompt insufficient ACL resources.\r\r","This symptom occurs if a packet filter is applied to an interface and then rules in the ACL of the packet filter are modified. \r\r","R3507P09"]
["202203290188","VLANs that do not belong to an AC interface are blocked. \r\r","This symptom occurs if STP is enabled on the AC interface in an L2VPN network.  \r\r","R3507P09"]
["202107110018","The aggregate interface configured as an MFF network port forwards received ARP requests out of its member interfaces.\r\r","This symptom occurs if a Layer 2 aggregate interface is configured as an MFF network port after MFF is enabled.\r\r","R3507P02"]
["202108250280","Batch backup fails to complete when BGP NSR backs up data from the active BGP process to the standby BGP process consecutively.\r\r","This symptom might occur when BGP NSR backs up data from the active BGP process to the standby BGP process consecutively.\r\r","R3507P02"]
["202107050836","Error logs about unsupported or unavailable transceiver modules are generated repeatedly, resulting in high CPU usage.\r\r","This symptom occurs if the following conditions exist:\r\r\nThe device is installed with an incompatible transceiver module or not installed with any transceiver modules.\r\r\nNetwork management software retrieves information about transceiver modules periodically.\r\r","R3507P02"]
["202107211304","Failed to save the running configuration.\r\r","This symptom might occur when you use the save command to save the running configuration.\r\r","R3507P02"]
["202107191057","Some 802.1X users cannot come online on a port.\r\r","This symptom might occur if the following conditions exist:\r\r\nThe port is enabled with both 802.1X authentication and MAC authentication.\r\r\nA large number of users are repeatedly coming online and going offline.\r\r","R3507P02"]
["202107211171","After you execute the silent-interface all command for the OSPF process, execute the undo silent-interface command for the OSPF interface, and restart the device, the configuration of the undo silent-interface command does not take effect, causing OSPF neighbor relationship establishment failures.\r\r","This symptom might occur when you execute the silent-interface all command for the OSPF process, execute the undo silent-interface command for the OSPF interface, and then restart the device.\r\r","R3507P02"]
["202107220559","BGP peer flapping with a packet loss duration of nine seconds occurs after an active/standby switchover, and error message Send notification with error 5/0 is displayed.\r\r","This symptom might occur when the following conditions exist:\r\r\nAn active/standby switchover occurs on the device.\r\r\nThe configuration on the BGP peer of the device changes during the switchover and the peer sends Refresh packets to the device.\r\r","R3507P02"]
["202107110017","The aggregate interface sends a received ARP reply out of a member interface back to the upstream device, and the upstream device reports a MAC move event.\r\r","This symptom occurs after the arp detection trust command is executed on an aggregate interface and the aggregate interface receives an ARP reply.\r\r","R3507P02"]
["202108230830","The device falsely reports CRC error packet notifications for IRF ports.\r\r","This symptom might occur if the device has been running for a period of time and a number of ports are forwarding traffic.\r\r","R3507P02"]
["202109240201","All devices are elected as the master in the IPv6 VRRP group, and they cannot ping each another. \r\r","This symptom occurs if you configure the mld-snooping source-deny command for a member port in a dynamic aggregation group.\r\r","R3507P02"]
["202109240467","The system prompts that a QoS policy failed to be applied to an interface, and flow mirroring ERSPAN failed. \r\r","This symptom occurs if you configure flow mirroring ERSPAN for an aggregation group member port and the aggregation group member port comes up and goes down multiple times. \r\r","R3507P02"]
["202107160918","The lldp process might exit unexpectedly. \r\r","This symptom might occur if aggregation groups exist on the device and the lldpLocManAddrEntry table in the MIB is regularly accessed.\r\r","R3507P02"]
["202107191086","After some 802.1X users come online, no authorization VLAN or VSI is assigned to them. \r\r","This symptom occurs if the following operations are performed:\r\r\nBoth 802.1X authentication and MAC authentication are enabled on interface. \r\r\nACLs are assigned to MAC authentication users. \r\r\nUsers come online and then go offline. \r\r\nVLANs or VSIs are assigned to 802.1X users.\r\r","R3507P02"]
["202103311306","Failed to delete a permanent static route.\r\r","This symptom occurs if the following operations are performed:\r\r\nConfigure a permanent static route and specify a preference lower than common static routes for the permanent static route.\r\r\nChange the output interface address of the permanent static route and change the permanent static route settings multiple times. The permanent static route is recursed to a common route or to Null 0.\r\r\nDelete the permanent static route.\r\r","R3507P02"]
["202105110200","CVE-2021-29219, an incorrect neighbor management address is displayed in the output from the display lldp neighbor-information verbose command.\r\r","This symptom occurs if the following conditions exist:\r\r\nThe length of the value in the Management Address TLV is less than 8 bytes in the CDP packets received by the device.\r\r\nThe total length of the Management Address TLV is less than 12 bytes.\r\r","R3507"]
["202104220726","User credential information leaks.\r\r","This symptom might occur when the user logs in to the Web interface of the device.\r\r","R3507"]
["202105060531","Host routes become invalid on an IRF fabric after a master/subordinate switchover.\r\r","This symptom occurs if the host routes have different next hops.\r\r","R3507"]
["202105110235","The number of secure MAC addresses on a port has reached the upper limit. However, port security does not work as expected when a user moves from another port to this port.\r\r","This symptom occurs if the following operations are performed:\r\r\n(1) Port security is enabled on both of the ports. On each of the ports, the MAC address of a user is configured as a secure MAC address. The secure MAC addresses configured on the two ports are different.\r\r\n(2) The two ports learn MAC addresses from each other.\r\r\n(3) The users that use the configured secure MAC addresses move between the two ports.\r\r","R3507"]
["202103290727","The netmeisterd process runs abnormally on an IRF fabric.\r\r","This symptom occurs if third-party network management software cannot correctly recognize the H3C IRF fabric and issues a command to reboot the master device of the IRF fabric.\r\r","R3507"]
["202102230116","The DHCP address pool fails to assign IP addresses to clients from its second secondary subnet.\r\r","This symptom might occur if no IP addresses are available for dynamic allocation on the primary subnet and first secondary subnet in the DHCP address pool.\r\r","R3507"]
["202104200379","The device reboots unexpectedly after running for a period of time. \r\r","This symptom occurs if the device receives IP packets destined to 239.255.255.250 and with the TTL as 1 or 2.\r\r","R3507"]
["202102150008","The netconf log source all verbose command gets stuck on an IRF fabric with an extremely low probability.\r\r","This symptom might occur after a master/subordinate switchover if the IRF fabric is configured with loop detection and AAA or NETCONF services exist on the IRF fabric.\r\r","R3507"]
["202103241845","After you modify the device IP, the device can still access the network. \r\r","This symptom occurs if the actual number of ARP snooping entries on the device is different from that collected by the counter. \r\r","R3507"]
["202102160026/202102221454","Online MAC authentication users are logged out on an IRF fabric because their idle timeout timer expires. However, the users are continuously sending traffic to the device.\r\r","This symptom occurs if a master/subordinate switchover has occurred on the IRF fabric.\r\r","R3507"]
["202102100037","A number of MAC authentication users are logged out on an IRF fabric after a master/subordinate switchover.\r\r","This symptom occurs if the online duration of these MAC authentication users is longer than the session timeout period assigned by the server after the master/subordinate switchover.\r\r","R3507"]
["202104200312","MAC authentication users cannot come online on a port.\r\r","This symptom might occur if the MAC authentication users come online and go offline repeatedly on the port when the following conditions exist:\r\r\nThe port is enabled with both 802.1X authentication and MAC authentication.\r\r\nThe port is configured with the 802.1X guest VLAN.\r\r","R3507"]
["202101190137","The device reboots automatically with a low probability when it runs the R3506P08 or R3506P10 software version. The reboot reason is reported as UserReboot.\r\r","This symptom might occur when the device runs the R3506P08 or R3506P10 software version.\r\r","R3506P11"]
["202008260498","Port isolation does not take effect on an aggregate interface.\r\r","This symptom might occur if port isolation is configured on an aggregate interface where multiple ACs exist.\r\r","R3506P10"]
["202009220628","The device cannot identify phone offline events.\r\r","This symptom might occur if the device is attached to phones that do not send CDP packets periodically, such as Polycom and AudioCodes phones.\r\r","R3506P10"]
["202009280287","CVE-2020-10188\r\r","utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.\r\r","R3506P10"]
["202008240782","The Telnet process hangs.\r\r","This symptom might occur if command accounting is enabled and the AAA server is unreachable.\r\r","R3506P10"]
["202008240177","Users fail their first portal authentication attempts while passing the second one.\r\r","This symptom might occur if both the portal apply mac-trigger-server and portal apply web-server settings are configured.\r\r","R3506P10"]
["202007271063","The device might fail to start properly with a very low probability. \r\r","This symptom occurs if the device is repeatedly power-cycled.\r\r","R3506P08"]
["202005271313","1-Gbps fiber ports do not come up.\r\r","This symptom occurs because 1-Gbps fiber ports cannot be connected to SGMII devices.\r\r","R3506P06"]
["202005291034","An aggregate interface does not load share TCP or UDP traffic among member links.\r\r","This symptom might occur if TCP or UDP traffic is forwarded out of an aggregate interface.\r\r","R3506P06"]
["202001170358","802.1X users and MAC authentication users come online through the same port. The ACL issued to users that come online later does not take effect. \r\r","This symptom occurs if the following operations have been performed:\r\r\n(1) Configure both MAC authentication and 802.1X authentication on a port. \r\r\n(2) Issue the same ACL to users.\r\r","R3506P06"]
["202005111273","The combo ports on all IRF subordinate devices go down after a master/subordinate switchover.\r\r","This symptom occurs if the master/subordinate switchover occurs after the original master device reboots or the entire IRF fabric reboots.\r\r","R3506P06"]
["202001080562","A MAC address cannot be learned into the corresponding VLAN.\r\r","This symptom occurs if an IP subnet-based VLAN is configured and an interface in the VLAN receives packets with the same source MAC address. \r\r","R3506P02"]
["201912170108","When the PoED process is restarted, the process does not respond. \r\r","This symptom occurs if the following conditions exist:\r\r\nMultiple PoE-capable devices form an IRF fabric. \r\r\nThe master and subordinate member devices all act as PSEs to supply power. \r\r\nThe PoED process is restarted every 20 seconds. \r\r","R3506P02"]
["201911070588","The SSHD call stack might be printed. \r\r","This symptom occurs if you log in to the device repeatedly through SSH.\r\r","R3506P02"]
["201908270157","After a user passes 802.1X authentication and enters the username and password on a PC, ErrCode=0 appears on the switch and the user goes offline. About half a minute to one minute later, the user performs authentication again and comes online. \r\r","This symptom occurs if the following operations are performed:\r\r\nOn an interface configured with port-based access control, configure the guest VLAN and the hybrid port is removed from the default VLAN (VLAN 1). \r\r\nAfter a user passes 802.1X authentication, the user modifies the username and password and initiates authentication again. \r\r","R3506P02"]
["201906200052","The port security, LLDP, and interface management processes become deadlocked.\r\r","This symptom occurs with a low probability if port security is configured on the device and an intrusion protection is triggered.\r\r","R3506"]
["201906050407","When many-to-one VLAN mapping is configured on the device, a connected terminal cannot ping the extranet after it re-obtains an IP address.\r\r","This symptom might occur if the terminal re-obtains the IP address after the port through which the terminal connects to the device is moved from an original VLAN to the translated VLAN.\r\r","R3506"]
["201905080677","On an ADCampus network, the device obtains an incorrect automated VCF fabric deployment template.\r\r","This symptom might occur if the device is an access node and tries to obtain an automated VCF fabric deployment template.\r\r","R3506"]
["201904180672","IPv6-AH packets cannot match an ACL rule with the protocol specified as ipv6-ah.\r\r","This symptom might occur if the protocol is specified as ipv6-ah for an ACL rule.\r\r","R3506"]
["201904150324","When the device is configured to display log buffer information and buffered logs, it displays only the newest log rather than all logs in the log buffer.\r\r","This symptom might occur if the display operation is repeatedly performed after the log buffer gets full.\r\r","R3506"]
["201904100097","CFD loopback does not take effect on a service instance.\r\r","This symptom might occur if the MAs in the service instance are configured without carrying the VLAN attribute.\r\r","R3506"]
["201902020370","Only eight ports on the PoE-capable device can supply power.\r\r","This symptom might occur if an exception exists on the power management configuration register.\r\r","R3506"]
["201905140328","When port security is configured, traffic forwarding fails because of secure MAC address loss after the entire IRF fabric reboots or a member device that has secure MAC addresses reboots.\r\r","This symptom might occur if the IRF fabric contains three or more member devices and the entire IRF fabric reboots or a member device that has secure MAC addresses reboots.\r\r","R3506"]
["201902010586","CVE-2018-5407\r\r","OpenSSL is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information. This may aid in further attacks.\r\r","R3208P16"]
["201812070828","HPE Comware 7 stored and reflected XSS Vulnerability \r\r","An xss reflected in the web portal of the appliance HP Comware switch 7.1.045. Attackers can exploit this issue to open a web browser and log in to the application using valid or not credentials.\r\r","R3208P16"]
["201812280425","Multiple Telnet users remain and cannot be deleted, and the CPU usage keeps higher than 50% as a result.\r\r","This symptom might occur if the Telnet window is closed when a Telnet user logs in to a comsh user and then logs in to a Telnet user.\r\r","R3208P16"]
["201812280404","The sshd process deadlock occurs. \r\r","This symptom might occur if SSH logout is performed when the CPU usage is high. \r\r","R3208P16"]
["201812250322","The arp restricted-forwarding enable command might not take effect. \r\r","This symptom occurs if the arp restricted-forwarding enable command is configured on the device and the device uses IPSG bindings for forwarding preferentially. \r\r","R3208P16"]
["201807260566","In an ADCampus network, an automatically created aggregation group is deleted. \r\r","This symptom occurs if only one of the aggregation group member ports is up. \r\r","R3208P16"]
["201801050451","The MAC information of an 802.1X user is deleted. As a result, traffic cannot be forwarded. \r\r","This symptom occurs if an 802.1X user logs in to the subordinate member device of an IRF fabric, and then the IRF fabric splits. \r\r","R3208P16"]
["201812060189","A user cannot log in to the switch through SSH when the number of online SSH users reaches 32.\r\r","This symptom occurs if the device does not update the number of online SSH users after the SSH client logs out.\r\r","R3208P15"]
["201812060193","The xmlcfgd process exits unexpectedly and a core file is created.\r\r","This symptom occurs if the following operations have been performed:\r\r\n(1) Bind more than 13 static addresses to the DHCP address pool.\r\r\n(2) Use the SoapUI tool to perform a GET operation on the DHCP/DHCPServerPoolStatic table.\r\r","R3208P15"]
["201812060181","The switch reboots unexpectedly after IPsec is configured.\r\r","This symptom occurs if IPsec is configured.\r\r","R3208P15"]
["201811130200","The port security process is locked.\r\r","This symptom occurs if the following conditions exist:\r\r\nThe intrusion protection mode is disableport-temporarily on a port.\r\r\nPort security triggers intrusion protection and sets the port to the down state while LLDP is obtaining user data from port security.\r\r","R3208P15"]
["201811050088","The device is connected to an IMC server for portal authentication. The device is logged out because of security check failures. \r\r","This symptom occurs if the device is connected to an IMC server and IMC is configured with a security policy to perform security check for the device.\r\r","R3208P15"]
["201811140403","CVE-2018-15473\r\r","OpenSSH is prone to a user-enumeration vulnerability. An attacker may leverage this issue to harvest valid user accounts, which may aid in brute-force attacks. OpenSSH through 7.7 are vulnerable; other versions may also be affected.\r\r","R3208P15"]
["201810110329","A 10-GE copper port cannot work at 10 Gbps or works unstably at 10 Gbps.\r\r","This symptom occurs if the 10-GE copper port is directly connected to another 10-GE copper port.\r\r","R3208P15"]
["201810110290","DHCP server MIBs fail to be read.\r\r","None.\r\r","R3208P15"]
["201809140102","Port security configuration changes after a software upgrade.\r\r","This symptom might occur if the port security-configured switch is upgraded to R3208P10 or R3208P12.\r\r","R3208P15"]
["201811300199","A portal user fails re-DHCP authentication, with a \"Nonexistent username\" error message prompted.\r\r","This symptom might occur when a portal user performs re-DHCP authentication.\r\r","R3208P15"]
["201811050128","Memory leaks occur to the service using the fast forwarding table. \r\r","This symptom occurs if the following conditions exist:\r\r\n(1) A large amount of traffic with varying quintuples is sent to the CPU through fast forwarding. \r\r\n(2) The fast forwarding entries age out. \r\r","R3208P15"]
["201810180032","When you enable BFD on an aggregate interface, the system prompts that the operation failed. \r\r","This symptom occurs if the low bits of the source IP address and destination IP address are multicast addresses when you enable BFD on an aggregate interface. \r\r","R3208P15"]
["201809050571","The controller issues the save command to the switch every 30 minutes and is disconnected from the switch immediately after the command is issued. When the display process command is executed, the output shows that a large number of residual configuration copy processes exist on the switch.\r\r","This symptom might occur if the controller issues the save command to the switch every 30 minutes and is disconnected from the switch immediately after the command is issued.\r\r","R3208P15"]
["201810120342","The switch cannot obtain the incoming and outgoing port numbers for traffic on an sFlow-enabled interface.\r\r","This symptom might occur if sFlow is enabled on an interface.\r\r","R3208P15"]
["201810150077","After a two-chassis IRF fabric reboots, MAC authentication users fail authentication on a port of the subordinate member.\r\r","This symptom might occur if the IRF member devices each have a port that is working in the userlogin-secure-or-mac port security mode and MAC authentication users perform authentication on the port on the subordinate member after the IRF fabric reboots.\r\r","R3208P15"]
["201809290352","A 10-gigabit fiber port has CRC packet error information after receiving traffic for a long period of time.\r\r","This symptom might occur if a 10-gigabit fiber port has been receiving traffic for a long period of time.\r\r","R3208P15"]
["201810300318  ","The CPU usage of the subordinate IRF member device becomes higher gradually.  \r\r","This symptom occurs if the IRF fabric runs for a long period of time and a large number of interface up/down events occur on the subordinate device.\r\r","R3208P15"]
["201812170354","The display device manuinfo command does not display power supply information. \r\r","This symptom occurs if the display device manuinfo command is executed.\r\r","R3208P15"]
["201808290664","In the display dot1x command output, the Offline detect period field is not aligned with the other fields. \r\r","This symptom occurs if the display dot1x command is executed. \r\r","R3208P12"]
["201809050749","Some deleted MAC address entries might remain. \r\r","This symptom occurs if a large number of MAC address entries are learned and the undo mac-address command is used to delete MAC address entries.\r\r","R3208P12"]
["201808090750","In QMC, ports on the device panel cannot be managed. \r\r","This symptom occurs if QMC is used to manage the device.\r\r","R3208P12"]
["201808160104","The MIB-Browser fails to read information of the DHCP server MIB nodes. \r\r","This symptom occurs if the MIB-Browser is used to read information of the DHCP server MIB nodes.\r\r","R3208P12"]
["201809050679","The local mirroring configuration does not take effect after the device is rebooted. \r\r","This symptom occurs if STP is configured globally, local mirroring is configured, and then the device is rebooted.\r\r","R3208P12"]
["201807310087","HTTPS redirection fails. \r\r","This symptom occurs if HTTPS redirection is enabled and a user uses the browser in the MAC OS to access the server.\r\r","R3208P12"]
["201806050164","The configuration of a Layer 3 aggregate interface is lost.  \r\r","This symptom occurs if a Layer 3 aggregate interface is configured, the configuration is saved, and the device is rebooted.\r\r","R3208P12"]
["201808140119","The ACL function does not take effect. \r\r","This symptom occurs if 802.1X issues authorization ACLs.\r\r","R3208P12"]
["201808070167","A user that fails to pass MAC authentication cannot perform Web authentication. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) An interface is configured with both MAC authentication and Web authentication. \r\r\n(2) A user fails to pass MAC authentication.\r\r","R3208P12"]
["201808060785","An 802.1X authentication server fails to issue authorization ACLs. \r\r","This symptom occurs if 802.1X authentication is enabled and the authentication server issues authorization ACLs containing rules related to TCP or UDP services and port numbers to users.\r\r","R3208P12"]
["201807210046","After a user logs in to the device by using SSH and then goes offline, remaining information of the user exists on the device. \r\r","This symptom occurs if the user logs in to the device and then goes offline by using SSH frequently.\r\r","R3208P12"]
["201807120164","Some UDP packets with the destination port number 6784 are lost. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) Configure BFD MAD on an IRF fabric. \r\r\n(2) The IRF fabric receives UDP packets with the destination port number 6784.\r\r","R3208P12"]
["201804260662","The following problems occur:\r\r\nWhen a user performs authentication through HWTACACS, the user cannot successfully log in, and no debugging information is printed. \r\r\nWhen a user performs authentication through RADIUS, the user can successfully log in, but part of the debugging information is lost. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) Configure the AAA authentication method as HWTACACS or RADIUS.\r\r\n(2) A user logs in to the device through Telnet, enters an incorrect password, and then immediately enters the correct password to log in. \r\r","R3208P12"]
["201806120588","The panel of the device is not completely displayed on the Web interface. \r\r","This symptom occurs if you log in to the Web interface of a device that has combo interfaces, and enter the Dashboard > System Utilization > View Details page. \r\r","R3208P12"]
["201807160406","The MAC address entry aging timer is different from the offline detect timer. \r\r","This symptom occurs if the hit bit of the first packet with the specified MAC address is not set during MAC authentication. \r\r","R3208P12"]
["201806290399","The value of the snmpEngineboot node is incorrect. \r\r","This symptom occurs if the whole IRF fabric is rebooted to cause a master/subordinate switchover. \r\r","R3208P12"]
["201807160277","The RPS LED is off when the device is connected to an RPS. \r\r","This symptom occurs when the device is connected to an RPS. \r\r","R3208P12"]
["201807040644","PBR does not take effect on ports in a super VLAN.\r\r","This symptom occurs if PBR is configured on a super VLAN interface.\r\r","R3208P12"]
["201807040637","When the spanning tree protocol is disabled globally, spanning tree protocol packets cannot be flooded. \r\r","This symptom occurs if the spanning tree protocol is disabled globally. \r\r","R3208P12"]
["201807040593","After you modify the login password on the Web interface, you will fail to log in to the device again. In this case, you must set the password again. \r\r","This symptom occurs if you log in to the device through the Web interface and modify the login password. \r\r","R3208P12"]
["201807190555","The NMS memory leaks. \r\r","This symptom occurs if the undo snmp-agent trap enable command is used to disable SNMP notifications and the NMS walks on the SYSLOG-MSG-MIB node information.\r\r","R3208P10"]
["201808020501","The device fails to obtain the authorization VLAN name in the \\000xxxxx\\000 format from the RADIUS server.\r\r","This symptom might occur if the RADIUS server issues an authorization VLAN name in the \\000xxxxx\\000 format to an authenticated user.\r\r","R3208P10"]
["201807310087","HTTPS redirection fails. \r\r","This symptom occurs if HTTPS redirection is enabled and a user uses the browser in the MAC OS to access the server.\r\r","R3208P10"]
["201806050164","The configuration of a Layer 3 aggregate interface is lost.  \r\r","This symptom occurs if a Layer 3 aggregate interface is configured, the configuration is saved, and the device is rebooted.\r\r","R3208P10"]
["201808140119","The ACL function does not take effect. \r\r","This symptom occurs if 802.1X issues authorization ACLs.\r\r","R3208P10"]
["201808070167","A user that fails to pass MAC authentication cannot perform Web authentication. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) An interface is configured with both MAC authentication and Web authentication. \r\r\n(2) A user fails to pass MAC authentication.\r\r","R3208P10"]
["201808060785","An 802.1X authentication server fails to issue authorization ACLs. \r\r","This symptom occurs if 802.1X authentication is enabled and the authentication server issues authorization ACLs containing rules related to TCP or UDP services and port numbers to users.\r\r","R3208P10"]
["201807210046","After a user logs in to the device by using SSH and then goes offline, remaining information of the user exists on the device. \r\r","This symptom occurs if the user logs in to the device and then goes offline by using SSH frequently.\r\r","R3208P10"]
["201807120164","Some UDP packets with the destination port number 6784 are lost. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) Configure BFD MAD on an IRF fabric. \r\r\n(2) The IRF fabric receives UDP packets with the destination port number 6784.\r\r","R3208P10"]
["201804260662","The following problems occur:\r\r\nWhen a user performs authentication through HWTACACS, the user cannot successfully log in, and no debugging information is printed. \r\r\nWhen a user performs authentication through RADIUS, the user can successfully log in, but part of the debugging information is lost. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) Configure the AAA authentication method as HWTACACS or RADIUS.\r\r\n(2) A user logs in to the device through Telnet, enters an incorrect password, and then immediately enters the correct password to log in. \r\r","R3208P10"]
["201807160406","The MAC address entry aging timer is different from the offline detect timer. \r\r","This symptom occurs if the hit bit of the first packet with the specified MAC address is not set during MAC authentication. \r\r","R3208P10"]
["201806290399","The value of the snmpEngineboot node is incorrect. \r\r","This symptom occurs if the whole IRF fabric is rebooted to cause a master/subordinate switchover. \r\r","R3208P10"]
["201807160277","The RPS LED is off when the device is connected to an RPS. \r\r","This symptom occurs when the device is connected to an RPS. \r\r","R3208P10"]
["201807040644","PBR does not take effect on ports in a super VLAN.\r\r","This symptom occurs if PBR is configured on a super VLAN interface.\r\r","R3208P10"]
["201807040637","When the spanning tree protocol is disabled globally, spanning tree protocol packets cannot be flooded. \r\r","This symptom occurs if the spanning tree protocol is disabled globally. \r\r","R3208P10"]
["201807040593","After you modify the login password on the Web interface, you will fail to log in to the device again. In this case, you must set the password again. \r\r","This symptom occurs if you log in to the device through the Web interface and modify the login password. \r\r","R3208P10"]
["201805250708","CVE-2016-9586\r\r","Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.\r\r","R3208P08"]
["201804260567","NMS receives traps more than 10 minutes after the device reboots. \r\r","This symptom occurs if the security model of SNMPv3 is authentication with privacy and the SNMP agent device is rebooted. \r\r","R3208P08"]
["201806110087","The device might not respond when the display ike sa command is executed. \r\r","This symptom occurs if the device acts as the IKE responder, and IKE SAs are established again after old IKE SAs are aged and deleted. \r\r","R3208P08"]
["201804260604","IPsec tunnels are interrupted irregularly. \r\r","This symptom occurs if IPsec are configured on two devices and the two devices initiate negotiation packets to each other at the same time. \r\r","R3208P08"]
["201711290750","The SNMP function fails. \r\r","This symptom occurs if the snmp-agent port command is used to modify the UDP port for receiving SNMP packets.\r\r","R3208P08"]
["201806050863","The command execution result is not displayed. \r\r","This symptom occurs if you enter the Python shell and execute Comware V7 commands. \r\r","R3208P08"]
["201805290211","An access device cannot ping the core device. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) Two devices form an IRF fabric. The IRF fabric is connected to the core device through a multichassis aggregate link.\r\r\n(2) The access device connects to the IRF fabric through an aggregate interface, and the aggregate interface is assigned to a port isolation group.\r\r\n(3) Reboot the IRF fabric. \r\r","R3208P08"]
["201806140516","ARP replies are dropped. \r\r","This symptom occurs if a trunk port of the device sends ARP replies shorter than 64 bytes. \r\r","R3208P08"]
["201806200110","The system does not automatically modify the QoS priorities for traffic in a voice VLAN. \r\r","This symptom occurs if an interface has voice VLAN enabled and receives voice traffic. \r\r","R3208P08"]
["201805250467","An interface on the device leaves the voice VLAN and cannot join the voice VLAN again. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) In an IRF fabric, an interface on a subordinate member device has LLDP enabled and voice VLAN configured, and is connected to a LLDP/CDP-capable voice device. \r\r\n(2) Establish or disconnect LLDP neighbor relationship on the subordinate member device.\r\r","R3208P08"]
["201805220359","The device continuously sends ARP requests. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) The device is configured with multiport ARP entries. \r\r\n(2) Outgoing interface consistency check for ARP entries and MAC address entries is enabled. \r\r","R3208P08"]
["201805250699","A device port learns the source MAC address in LLDP packets.\r\r","This symptom occurs if the device port receives LLDP packets.\r\r","R3208P08"]
["201802010506","An IP address cannot be configured for the device. \r\r","This symptom occurs if an IRF member device is powered off and rebooted multiple times to perform master/subordinate switchovers. \r\r","R3208P08"]
["201804090636","The device reboots unexpectedly.\r\r","This symptom might occur if the following conditions exist:\r\r\n(1) The network has a large number of short TCP connections.\r\r\n(2) The device keeps receiving and sending packets.\r\r\n(3) The device accesses resources that have been released by itself.\r\r","R3208P08"]
["201802010690","The device discards packets with a checksum of 01 00.\r\r","This symptom might occur if the checksum of incoming packets is 01 00.\r\r","R3208P08"]
["201711160780","The energy saving configuration on a combo interface gets lost after the active port of the combo interface changes from the copper port to the fiber port and then back to the copper port.\r\r","This symptom might occur if the following operations are performed:\r\r\n(1) When the copper port of the combo interface is active, enable EEE and auto power-down on the combo interface.\r\r\n(2) Activate the fiber port of the combo interface.\r\r\n(3) When the fiber port of the combo interface is active, activate the copper port of the combo interface.\r\r","R3208P08"]
["201805090571","When dropping unknown multicast data packets is enabled for a VLAN, the device floods multicast packets with TTL 0 in the VLAN.\r\r","This symptom might occur if dropping unknown multicast data packets is enabled for the VLAN.\r\r","R3208P08"]
["201804270451","An interface sends incoming ARP requests back to the source interfaces.\r\r","This symptom might occur after the following operations are performed:\r\r\n(1) Configure the interface as an ARP trusted interface by using the arp detection trust command.\r\r\n(2) Assign the interface to an aggregation group.\r\r\n(3) Delete the aggregation group or remove the interface from the aggregation group.\r\r","R3208P08"]
["201804180241","The outgoing interface information is inconsistent in the MAC address entry and the ARP entry for the same MAC address.\r\r","This symptom might occur if the MAC address moves frequently.\r\r","R3208P08"]
["201805180576","Symptom: Non-first fragments of an IP packet, which do not contain TCP or UDP port numbers, match an ACL rule specified with TCP or UDP port numbers.\r\r","This symptom might occur if the ACL rule is specified with TCP or UDP port numbers.\r\r","R3208P08"]
["201801190229","CVE-2017-15896\r\r","An attacker can exploit this issue to bypass TLS validate and encrypt, send application data to Node.js.\r\r","R3208P08"]
["201801190229","CVE-2017-3737\r\r","Successfully exploiting this issue will allow attackers to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.\r\r","R3208P08"]
["201801190229","CVE-2017-3738\r\r","An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.\r\r","R3208P08"]
["201705310258","The device reboots exceptionally at a very low probability. \r\r","This symptom occurs if the device has been running for a long period of time and invalid memory is accessed when PBR determines whether the next hop is valid through querying the FIB table. \r\r","R3208P08"]
["201706300315","When the status of a track entry associated with a static route changes, the static route does not respond to the change, and status of the static route's next hop does not change. \r\r","This symptom occurs if a static route fails to establish a connection to the track module when the static route is associated with a track entry.\r\r","R3208P08"]
["201804090334","It takes 20 seconds to log in to the device through SSH. \r\r","This symptom occurs if you log in to the device through SSH after the password control feature is enabled. \r\r","R3208P08"]
["201705310354","The rawip socket remains, which exhausts the memory and causes the device to reboot. \r\r","This symptom occurs if you keep performing NQA operation for a period of time. \r\r","R3208P08"]
["201706300478","The device cannot send ICMP error packets. \r\r","This symptom occurs if the following conditions exist:\r\r\nThe ip unreachables enable and ip ttl-expires enable commands are configured on the device. \r\r\nThe device receives ICMP request packets. \r\r","R3208P08"]
["201801290865","The prefix obtained from an IPv6 address is still advertised in RA messages. \r\r","This symptom occurs if an IPv6 address is manually configured and then the ipv6 nd ra prefix default no-advertise command is configured to disable the device from advertising the prefix of the IPv6 address.\r\r","R3208P08"]
["201802070015","The PoE function of interfaces still supplies power. \r\r","This symptom occurs if PoE is disabled on all interfaces and then PoE is disabled on the PSE. \r\r","R3208P08"]
["201801300024","Some BSR packets are dropped in a VLAN with IGMP snooping enabled. \r\r","This symptom occurs if IGMP snooping is enabled for a VLAN and BSR packets are received at wire speed in the VLAN. \r\r","R3208P08"]
["201803260509","The bpdu-drop any command configuration does not take effect. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) On an IRF fabric, configure BFD MAD. Execute the bpdu-drop any command on the IRF physical interfaces. \r\r\n(2) In system view, execute the undo stp global enable/stp global enable or reboot command. The STP status of interfaces changes. \r\r","R3208P08"]
["201803160619","With MAC authentication enabled, the device does not disconnect a user and still displays the user as online when the device does not receive any packets from the user within the offline detection timer but the MAC address entry has not aged out. \r\r","This symptom occurs if MAC authentication offline detection is enabled and the offline detection timer is different from the MAC address aging timer. \r\r","R3208P08"]
["201803200427","Traps are received more than 10 minutes after the device is rebooted. \r\r","This symptom occurs if the device is rebooted when authentication with privacy is configured for SNMPv3.\r\r","R3208P08"]
["201802010956","The connection between an IRF fabric and a controller flaps. \r\r","This symptom occurs if the following conditions exist:\r\r\nOpenFlow devices form an IRF fabric. \r\r\nA subordinate member device connects to the controller. \r\r\nThe subordinate member device receives 150-byte PIM packets at wire speed. \r\r","R3208P08"]
["201801300586","An OpenFlow device is disconnected from the controller. \r\r","This symptom occurs if the controller issues the openflow shutdown or undo openflow shutdown command twice. \r\r","R3208P08"]
["201803230514","After a device configured with port security is rebooted, users fail to come online through MAC authentication. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) Enable port security, and set the port security mode to macAddressWithRadius, macAddressOrUserLoginSecure, macAddressElseUserLoginSecure, macAddressOrUserLoginSecureExt, or macAddressElseUserLoginSecureExt on an interface.\r\r\n(2) Save the configuration, and delete the .mdb configuration file. \r\r\n(3) Reboot the device. \r\r","R3208P08"]
["201708150559","Dynamic MAC-based VLAN assignment is enabled on an interface, and the PVID of the interface is a secondary VLAN of a primary VLAN. If an incoming frame is tagged with the PVID and fuzzy MAC-to-VLAN entry match succeeds for the frame's source MAC address, the interface cannot forward the frame.\r\r","This symptom might occur if the interface receives a frame that carries a VLAN ID same as the PVID of the interface, and the PVID is a secondary VLAN of a primary VLAN.\r\r","R3208P08"]
["201712220061","CVE-2017-3736\r\r","An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.\r\r","R3208P08"]
["201712190289","CVE-2017-12190\r\r","Local attacker can exploit these issues to obtain sensitive information that may lead to further attacks.\r\r","R3208P08"]
["201712190289","CVE-2017-12192\r\r","Attackers can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed.\r\r","R3208P08"]
["201712190289","CVE-2017-15274\r\r","An attacker can exploit this issue to cause a local denial-of-service condition. \r\r","R3208P08"]
["201712190289","CVE-2017-15299\r\r","An attacker can exploit this issue to trigger a kernel panic, denying service to legitimate users.\r\r","R3208P08"]
["201801190481","On an OpenFlow-enabled IRF fabric that contains two member switches, the openflow shutdown command is executed on an interface of the subordinate switch, and then the interface is brought up from the controller. After a master/subordinate switchover, status of an interface is abnormal on the new master.\r\r","This symptom might occur if a master/subordinate switchover occurs after an interface that has been shut down by OpenFlow on the subordinate switch is brought up from the controller.\r\r","R3208P08"]
["201801180979","When receiving PIM bootstrap messages with a length of 1500 bytes, the switch can send only five bootstrap messages per second in a VLAN enabled with IGMP snooping.\r\r","This symptom might occur if IGMP snooping is enabled for a VLAN.\r\r","R3208P08"]
["201712230037","When the management Ethernet interface receives a Layer 3 packet that is not destined for the MAC address of the interface, the switch forwards the packet by using an incorrect route.\r\r","This symptom might occur if the management Ethernet interface receives a Layer 3 packet that is not destined for the MAC address of the interface.\r\r","R3208P08"]
["201801040748","ACLs are not completely deleted from the hardware after IP source guard configuration is deleted from a port and the VLAN interface of the VLAN to which the port is assigned.\r\r","This symptom might occur if IP source guard configuration is deleted from a port and the VLAN interface of the VLAN to which the port is assigned.\r\r","R3208P08"]
["201801180968","The switch is connected to a VRRP group. After the link between the VRRP master and the switch flaps, the switch has an incorrect ARP entry for the VRRP master. \r\r","This symptom might occur if the switch is connected to a VRRP group, and the link between the VRRP master and the switch flaps.\r\r","R3208P08"]
["201711290635","When a port joins a Layer 2 aggregation group, the allowed jumbo frame length configured on the Layer 2 aggregate interface is not synchronized to that port.\r\r","This symptom might occur if a port joins a Layer 2 aggregation group that is configured with the allowed jumbo frame length setting.\r\r","R3208P08"]
["201712210545","In the output from the display transceiver diagnosis interface command, the receive power of transceiver modules is incorrect.\r\r","This symptom might occur if the display transceiver diagnosis interface command is executed.\r\r","R3208P08"]
["201806040605","The status of the LED for an interface is incorrect.  \r\r","This symptom occurs if EEE is enabled on the interface and the interface is up.\r\r","R3208P08"]
["201711030370","CVE-2017-1000253\r\r","Local attackers may exploit this issue to gain root privileges.\r\r","R3208P03"]
["201711230489","The device reboots unexpectedly when reading an Entity MIB node.\r\r","This symptom might occur if the device reads an Entity MIB node.\r\r","R3208P03"]
["201711230366","The device reboots unexpectedly after receiving a packet-out message without the output or group action issued by the controller.\r\r","This symptom might occur if the device receives a packet-out message without the output or group action issued by the controller.\r\r","R3208P03"]
["201711230694","The device might fail to delete the configurations of HWTACACS servers when the configurations of HWTACACS servers are frequently deleted. Or, a process exception might occur if the device rolls back the configuration.\r\r","This symptom might occur if the following conditions exist:\r\r\nThe HWTACACS scheme configured on the device contains configurations of multiple HWTACACS authentication, authorization, and accounting servers.\r\r\nThe HWTACACS authentication, authorization, or accounting servers have the same VPN instance and IP address settings but different port numbers.\r\r","R3208P03"]
["201712040081","In an IRF fabric, the console port on the subordinate device hangs and some information of the subordinate device cannot be viewed on the master device.\r\r","This symptom might occur if the following conditions exist:\r\r\nThe IRF fabric is configured with the spanning tree feature.\r\r\nThe peer switch is disabled with the spanning tree feature.\r\r\nA loop exists between the IRF fabric and the peer switch.\r\r\n\r\r","R3208P03"]
["201711280600","After certain operations are performed, the display mac-address command does not display the voice VLAN MAC address entry of an IP phone. When the settings on the interface connected to the IP phone are removed and reconfigured, the IP phone cannot join a voice VLAN.\r\r","This symptom might occur if the following operations are performed:\r\r\n(1) Connect an IP phone to an interface.\r\r\n(2) Configure voice VLAN and port security on the interface.\r\r\n(3) Remove the settings from the interface and reconfigure them on the interface.\r\r","R3208P03"]
["201711280538","MAC address entries of MAC authentication users do not age out after the users go offline.\r\r","This symptom might occur if the following conditions exist:\r\r\nA Layer 2 switch configured with the spanning tree feature exists between the device and the authentication clients.\r\r\nThe device is enabled with MAC authentication.\r\r\nThe aging timer for dynamic MAC address entries is set to a value greater than 60 seconds by using the mac-address timer aging seconds command.\r\r\n\r\r","R3208P03"]
["201710300395","A remark action conflict is prompted when a QoS policy containing both an 802.1p priority marking action and a local precedence marking action in the same behavior is applied.\r\r","This symptom might occur if a QoS policy containing both an 802.1p priority marking action and a local precedence marking action in the same behavior is applied.\r\r\n\r\r","R3208P03"]
["201711110038","A user fails 802.1X or MAC authentication when the VLAN tag setting of the server-assigned authorization VLAN is different from that of the VLAN where the user resides \r\r","This symptom might occur if the VLAN tag setting of the server-assigned authorization VLAN is different from that of the VLAN where the user resides.  \r\r","R3208P03"]
["201709250409","The mirroring and STP settings are partially lost. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) Delete some SNMP settings.\r\r\n(2) Save the configuration by using the save force command and reboot the device.\r\r","R3208P03"]
["201708280341","MAC authentication fails after certain operations are performed.\r\r","This symptom might occur if the following operations are performed:\r\r\n(1) Enable port security, and set the port security mode to userlogin-secure-or-mac on an interface.\r\r\n(2) Save the configuration and upgrade the software, or reboot the switch and use a .cfg file to restore the configuration. \r\r","R3208P03"]
["201708280275","An 802.1X user that passes authentication on an interface is assigned an IP address in the guest VLAN, Auth-Fail VLAN, or critical VLAN instead of an IP address in the authorization VLAN.\r\r","This symptom might occur if the following conditions exist:\r\r\nBoth 802.1X and DHCP are enabled.\r\r\nAn 802.1X guest VLAN, Auth-Fail VLAN, or critical VLAN is configured on the interface.\r\r\nThe server successfully assigns an authorization VLAN.\r\r","R3208P03"]
["201708280259","802.1X authentication fails on an interface.\r\r","This symptom might occur if the following operations are performed:\r\r\nEnable 802.1X and specify the port-based access control method on an interface.\r\r\nSet the username request timeout timer by using the dot1x timer tx-period tx-period-value command.\r\r","R3208P03"]
["201708280255","A user logs in to the CLI through a console port. The CLI hangs up after the user executes the stp edged-port and stp loop-protection commands in interface range view.\r\r","This symptom might occur if AAA authentication is enabled for CLI login by using the authentication-mode scheme command and command accounting is enabled by using the command accounting command.\r\r","R3208P03"]
["201710300047","The snmp-agent target-host trap command configuration is lost after a master/subordinate switchover is performed in an IRF fabric.\r\r","This symptom occurs if the vpn-instance-name or security-string argument in the command contains dots (.).\r\r","R3208P03"]
["201708280230","A user passes MAC authentication on an interface with port security configured after failing 802.1X authentication. The user fails MAC authentication after the shutdown and undo shutdown commands are executed on the interface.\r\r","This symptom occurs if the port security mode is set to userlogin-secure-or-mac-ext on the interface.\r\r","R3208P03"]
["201710260388","The device does not support the ACL deployed by the 802.1X authentication server.\r\r","This symptom occurs if a rule in the deployed ACL contains the range keyword.\r\r","R3208P03"]
["201709250739","CVE-2017-3735\r\r","Successfully exploiting this issue will allow attackers to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.\r\r","R3208P03"]
["201710200010","Automatic configuration fails because a VLAN interface cannot obtain an IP address.\r\r","This symptom occurs when the device starts up without a configuration file.\r\r","R3208P03"]
["201708310208","Web authentication entries exist, and users of other authentication types fail authentication or fail to get authorized when a large number of users exist.\r\r","This symptom might occur if the following operations are performed when Web authentication is disabled:\r\r\n(1) Configure the web-auth free-ip command.\r\r\n(2) Reboot the device.\r\r","R3208P03"]
["201710310028","In an IRF fabric, the RRPP convergence time is 6 to 10 seconds after a master/subordinate switchover is performed upon a master reboot.\r\r","This symptom occurs if two RRPP domains are configured on the IRF fabric.\r\r","R3208P03"]
["201710260631","A 10 GE copper interface cannot come up.\r\r","None.  \r\r","R3208P03"]
["201710270144","The device fails to automatically execute the save force command.\r\r","This symptom might occur if the save force command is added to the autocfg configuration file.\r\r","R3208P03"]
["201708310228","Packet filtering does not work after the switch is rebooted.\r\r","This symptom might occur if the switch is rebooted after packet filtering is configured.\r\r","R3208P03"]
["201709220068","On an IRF fabric, the view of some interfaces might be unavailable after an IRF master/subordinate switchover.\r\r","This symptom might occur if an IRF master/subordinate switchover occurs when a new member joins the IRF fabric.\r\r","R3208P03"]
["201709040292","With the HWTACACS accounting server being blocked, the switch responds slowly to commands input by a Telnet user.\r\r","This symptom might occur if HWTACACS authentication is enabled for login.\r\r","R3208P03"]
["201710270540","Certain QoS policies cannot be applied.\r\r","This symptom might occur if one of the following operations are performed.\r\r\n \tApply a QoS policy that matches the outer VLAN IDs or inner VLAN IDs to the inbound direction of an interface for outer VLAN ID remarking.\r\r\n \tApply a QoS policy that matches the inner VLAN IDs to the inbound direction of an interface for inner VLAN ID remarking.\r\r\n \tApply a QoS policy that matches the outer VLAN IDs to the outbound direction of an interface for inner VLAN ID remarking.\r\r","R3208P03"]
["201710200099","sFlow cannot collect outgoing traffic statistics on an interface.\r\r","This symptom might occur if sFlow is configured on an interface.\r\r","R3208P03"]
["201709010571","LLDP is enabled globally and on an interface. The LLDPDUs sent by the interface show that autonegotiation is supported and enabled, but the PMD parameter Auto-negotiated Advertised Capability field is all zeros.\r\r","This symptom might occur if LLDP is enabled globally and on an interface.\r\r","R3208P03"]
["201704280459","CVE-2017-6458\r\r","NTP are prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. \r\r","R3208"]
["201704280459","CVE-2016-9042\r\r","NTP is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition, denying service to legitimate users.\r\r","R3208"]
["201704270120","CVE-2014-9297\r\r","An attacker can exploit this issue. When an NTP client decrypted a secret received from an NTP server.\r\r","R3208"]
["201704270120","CVE-2015-9298 \r\r","An attacker could bypass source IP restrictions and send malicious control and configuration packets.\r\r","R3208"]
["201707200766","During automatic ADCampus deployment, the switch does not replace the configuration on a downlink interface with the trunk port configuration when an AP accesses the switch through the downlink interface.\r\r","This symptom might occur if the switch acts as an access node on the ADCampus network.\r\r","R3208"]
["2016707110001","A terminal connected to an interface enabled with EEE cannot ping the switch.\r\r","This symptom might occur if the terminal connects to the switch through an interface enabled with EEE.\r\r","R3208"]
["201703060242","Packet loss occurs on an edge aggregate interface if the interface has not received LACPDUs within the LACP timeout interval.\r\r","This symptom might occur if an edge aggregate interface has not received LACPDUs within the LACP timeout interval.\r\r","R3115P08"]
["201703060053","The switch is connected to a Cisco IP phone installed with a key expansion module. When PoE is enabled on the interface connected to the phone, the phone can be powered on, but the key expansion module cannot start.\r\r","This symptom might occur if the following operations are performed:\r\r\n(1) Connect the switch to a Cisco IP phone installed with a key expansion module.\r\r\n(2) Enable PoE on the interface connected to the phone.\r\r\n(3) Set the maximum power for the PoE-enabled interface.\r\r","R3115P08"]
["201508120317","The switch uses a software version earlier than R3109P09, and PoE and LLDP are bled on an interface. When the interface flaps, the switch irregularly generates the CFGMAN_CFGCHANGED message to report configuration changes.\r\r","This symptom might occur if the following conditions exist:\r\r\nThe switch uses a software version earlier than R3109P09.\r\r\nPoE and LLDP are enabled on an interface, and the interface flaps. \r\r","R3115P08"]
["201607280306","SSH connections cannot be established if no Suite B cryptographic suite is specified for SSH.\r\r","This symptom might occur if no Suite B cryptographic suite is specified for SSH.\r\r","R3115P08"]
["201606130301","An authentication server cannot be removed from a TACACS scheme in the Web interface.\r\r","This symptom might occur if an authentication server is removed from a TACACS scheme in the Web interface.\r\r","R3115P08"]
["201606080536","An AudioCodes IP phone sending CDP packets cannot be assigned to the critical voice VLAN.\r\r","This symptom might occur if an AudioCodes IP phone sends CDP packets.\r\r\n\r\r","R3115P08"]
["201701170366","The user VLAN information in user event logs is inconsistent with the authorization VLAN information that the server issues to users. \r\r","This symptom might occur if the server issues authorization VLAN information to users that pass authentication.\r\r","R3115P07"]
["201701040586","The display vlan brief command cannot display information about VLANs numbered the multiple of 41.\r\r","This symptom might occur if the number of VLANs on the switch reaches the upper limit.\r\r","R3115P07"]
["201611220420","The console port of an IRF master might be inaccessible.\r\r","This symptom might occur if the tty and comsh processes run on different CPU cores.\r\r","R3115P07"]
["201611110196","In certain conditions, the display stp brief command displays incorrect status information for a port. \r\r","This symptom might occur if the following operations are performed:\r\r\n(1) Enable STP on the switch and its peer device.\r\r\n(2) Enable loop detection on the port connected to the peer device, and disable STP on the peer device.\r\r\n(3) Execute the display stp brief command for the port.\r\r","R3115P07"]
["201702060403","The 5130-24G-2SFP+-2XGT EI JG938A/5130-48G-2SFP+-2XGT EI JG939A/130-24G-PoE+-2SFP+-2XGT (370W) EI JG940A/5130-48G-PoE+-2SFP+-2XGT (370W) EI JG941A switch might lose software image files and configuration files.\r\r","None.\r\r","R3115P07"]
["201702130126","In certain conditions, an IRF fabric cannot be pinged after it reboots. \r\r","This symptom might occur if port security is enabled on the IRF fabric, and the maximum number of secure MAC addresses allowed on a port is set to 1.\r\r","R3115P07"]
["201701190157","In certain conditions, users cannot come online after the IRF fabric that the users access is rebooted.\r\r","This symptom might occur if the following conditions exist:\r\r\nPort security is enabled on the IRF fabric, and port security in userlogin-secure mode is enabled on the port that the users access.\r\r\nThe IRF fabric is rebooted.\r\r","R3115P07"]
["201702090546/201701100036","After an IRF fabric is rebooted, some subordinate switches fail to respond, and the CLI of these switches is inaccessible. Output from the display device command shows that these switches are in Fault state. \r\r","This symptom might occur if the following conditions exist:\r\r\n(1) The IRF fabric contains dual-chip switches.\r\r\n(2) The IRF fabric is rebooted.\r\r","R3115P07"]
["201701180065","Multicast traffic fails to be forwarded out of an aggregate interface.\r\r","This symptom occurs if the status of one member port in the aggregation group changes from Unselected to Selected after the device learns multicast routes. The aggregate interface is an outgoing interface of one of the multicast routes.\r\r","R3115P07"]
["201701170120","A memory leakage occurs on the device.\r\r","This symptom occurs if MFF in the automatic mode is enabled and then disabled repeatedly.\r\r","R3115P07"]
["201701060282","The device generates the log message \"RESEND_RADIUS:Failed to allocate PktID\". \r\r","This symptom occurs if a large number of users come online and go offline frequently when the primary RADIUS accounting server and secondary RADIUS accounting servers are unreachable.\r\r","R3115P07"]
["201611090264","An SFTP user assigned the network-operator user role has access to some commands that are supposed to be inaccessible to the user role.\r\r","This symptom occurs if the SFTP user passes either publickey or password-publickey authentication to log in to the device and is assigned the network-operator user role.\r\r","R3115P06"]
["201611070270","CVE-2016-8858\r\r","A remote user can send specially crafted data during the key exchange process to trigger a flaw in kex_input_kexinit() and consume excessive memory on the target system. This can be exploited to consume up to 384 MB per connection. \r\r","R3115P06"]
["201609300342","A memory leakage occurs in the stpd process.\r\r","This symptom occurs if the spanning tree feature is enabled on the device and the spanning tree operating mode is changed.\r\r","R3115P06"]
["201611080056","CVE-2016-5195\r\r","Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping.\r\r","R3115P06"]
["201611220390","Authentication for new portal users fails when a large number of online portal users are logging out.\r\r","This symptom might occur if the following conditions exist:\r\r\nThe RADIUS server provides accounting services for portal users.\r\r\nA large number of online portal users log out.\r\r","R3115P06"]
["201611220420","An IRF fabric cannot be accessed through the console port of the master.\r\r","This symptom might occur if an IRF fabric is accessed through the console port of the master.\r\r","R3115P06"]
["201611220435","After a two-chassis IRF fabric is rebooted, interface indexes change and Smart Link settings are lost.\r\r","This symptom might occur if the following operations are performed:\r\r\n(1) Delete the startup.mdb and ifindex.dat files on the IRF member switches.\r\r\n(2) Save the configuration and reboot the IRF fabric.\r\r\n(3) When the IRF member switches are rebooting, press Ctrl+B to access the Boot ROM menu of one IRF member switch. The other member switch is successfully rebooted. \r\r","R3115P06"]
["201612080146","The switch stops responding when the scripts are executed to repeatedly display memory information about the ipoe and ifmgr processes.\r\r","This symptom might occur if the scripts are executed to repeatedly display memory information about the ipoe and ifmgr processes.\r\r","R3115P06"]
["201611220280","After an IRF fabric is rebooted, the VPN instance information on the master is incorrect.\r\r","This symptom might occur if the following operations are performed on an IRF fabric:\r\r\n(1) Create tunnel interfaces.\r\r\n(2) Reboot the IRF fabric.\r\r","R3115P06"]
["201612070648","802.1X users fail 802.1X authentication.\r\r","This symptom occurs if the primary RADIUS server frequently becomes unreachable and a large number of 802.1X users frequently come online and go offline.\r\r","R3115P06"]
["201609120255","A large number of RXLOS interruptions occur on a transceiver module, which causes a high CPU usage and then causes the device to reboot.\r\r","This symptom occurs if the device is connected to a port of a test device through the transceiver module. \r\r","R3115P06"]
["201612090524","In log messages, the VLAN ID of a user is not the authorization VLAN ID assigned to the user.\r\r","This symptom might occur if a user passes access authentication and is assigned to the authorization VLAN issued by the server.\r\r","R3115P06"]
["201612080309","The NTP server sends the switch NTP packets that have the leap flag set to 01, but the local leap indicator of the switch is 00, and the leap flag of NTP packets sent by the switch is 00.\r\r","This symptom might occur if the following conditions exist:\r\r\n(1) A PC is directly connected to the switch's management interface and is configured as an NTP client.\r\r\n(2) An NTP server sends the switch NTP packets with the leap flag set to 01.\r\r","R3115P06"]
["201612060351","The dynamic MAC count is always displayed as 0. \r\r","This symptom might occur if the display openflow instance command is used to display detailed information of an OpenFlow instance. \r\r","R3115P06"]
["201612050429","Port isolation does not take effect. Traffic statistics exist on other aggregation group member ports. \r\r","This symptom might occur if the following operations are performed:\r\r\n(1) Configure an aggregation group and configure port isolation on its member ports. \r\r\n(2) Shut down all member ports by using the shutdown command or unplugging network cables. \r\r\n(3) Restore the member ports to the up state. \r\r\n(4) Send traffic to an aggregation group member port. \r\r","R3115P06"]
["201611250474","The device adds two layers of VLAN tags to an untagged packet. \r\r","This symptom might occur if the following conditions exist:\r\r\n(1) Switch A and Switch B are directly connected through trunk ports. The trunk ports permit a VLAN. \r\r\n(2) Configure an access port on Switch A and Switch B, and assign the access ports to the VLAN. Configure QinQ and L2PT on the access ports. \r\r\n(3) Send untagged L2PT protocol packets to the access ports. \r\r","R3115P06"]
["201611180294","A port goes down.\r\r","This symptom might occur if the following operations are performed:\r\r\n(1) Enable port security on the port and configure the limit on the number of secure MAC addresses. \r\r\n(2) Send packets according to the configured limit on the number of secure MAC addresses. \r\r","R3115P06"]
["201611090199","The debugging information has extra spaces. \r\r","This symptom might occur if the following operations are performed:\r\r\n(1) A user logs in to the device by using SSH.\r\r\n(2) The user enters incorrect passwords for three times. \r\r\n(3) The user fails to log in and is added to the blacklist. \r\r\n(4) The debugging information of the server is viewed. \r\r","R3115P06"]
["201610150081","Some users pass the authentication, but the MAC addresses of these users are not learned. \r\r","This symptom might occur if the following conditions exist:\r\r\nFive devices form an IRF fabric, including four S5130-52S-EI switches and one S5130-28S-EI switch.\r\r\nImport the user configuration and enable MAC authentication on all ports. \r\r\nUse an auxiliary device to bring up all the devices and perform authentication. The authentication users on each device are the same. As a result, these users are frequently moved among different devices. \r\r\nSend authentication traffic for a period of time. Then, stop authentication traffic on four devices, and leave authentication traffic on only one device. \r\r","R3115P06"]
["201610260405","A user fails to log in to the device. \r\r","This symptom might occur if the following conditions exist:\r\r\n(1) The tcp syn-cookies enable command is executed. \r\r\n(2) The Telnet client is not directly connected to the device. \r\r\n(3) The user uses an IPv6 address to log in to the device by using SSH or Telnet.\r\r","R3115P06"]
["201609230450","When a large number of IPv6 ND messages are learned and aged, traffic forwarding might fail because ARP/ND entries fail to be issued. \r\r","This symptom might occur if a large number of IPv6 ND messages are learned and aged. \r\r","R3115P06"]
["201607180428","IS-IS neighborship can be established. However, routing information cannot be obtained. \r\r","This symptom might occur if the NX9000 device sends protocol packets with the MT IS TLV whose length is 2 bytes. HPE devices consider the length as invalid. As a result, the LSPs are considered as incorrect and dropped. \r\r","R3115P06"]
["201603140259","The device operates improperly because the fast forwarding entries and sessions generated after tunnel encapsulation are incorrectly associated. \r\r","This symptom might occur if the byte sequence is not converted for some fields in IP headers when fast forwarding entries and sessions are generated before tunnel encapsulation. \r\r","R3115P06"]
["201610260040","The logbuffer cannot continue to record more logs. \r\r","This symptom might occur if the following conditions exist:\r\r\nThe info-center syslog min-age command is not configured.\r\r\nAdjust the system running time to be earlier than the system time. \r\r\nThe logbuffer is full. \r\r","R3115P06"]
["201610260323","The system prompts that the characters fail to be input. \r\r","This symptom might occur if you enter special characters when configuring a description on a client running the Windows 10 operating system. \r\r","R3115P06"]
["201610260451","A user cannot use the correct username and password to log in to the device through the management interface or console interface. \r\r","This symptom might occur if the password-control enable command is used to enable password control on the device and a large number of users use incorrect usernames and passwords to log in to the device.\r\r","R3115P06"]
["201610140261","CVE-2016-6304\r\r","Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.\r\r","R3115P06"]
["201610140261","CVE-2016-6306\r\r","The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c. \r\r","R3115P06"]
["201607280524","CVE-2016-2177\r\r","OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.\r\r","R3115P06"]
["201605090045","The unsupported QCN and DCBX options are configurable on the LLDP TLV configuration page of the Web interface.\r\r","This symptom might occur if the following operations are performed:\r\r\n(1) Access the device through the Web interface. \r\r\n(2) On the Network > LLDP > LLDP-TLV page, select an interface, select 802.1TLVs QCN and DCBX, and apply the settings.\r\r","R3115P06"]
["201608170166","After the IMC server issues the class attribute to the NAS, the RADIUS accounting requests that the NAS sends to the server do not carry the class attribute.\r\r","This symptom might occur if the IMC server issues the class attribute to the NAS after users pass RADIUS authentication.\r\r","R3115P05"]
["201610090108","Two users who use the same MAC address exist on the switch when certain conditions exist.\r\r","This symptom might occur if the following conditions exist:\r\r\n(1) Both MAC authentication and 802.1X authentication are performed for the users, and MAC authentication is successful. \r\r\n(2) MAC move is enabled on interfaces.\r\r","R3115P05"]
["201609300434","On an IRF fabric, OUI addresses are lost after a master/subordinate switchover.\r\r","This symptom might occur if the following conditions exist:\r\r\n(1) The number of OUI addresses reaches the upper limit on the IRF fabric.\r\r\n(2) A master/subordinate switchover occurs after the configuration is saved.\r\r","R3115P05"]
["201609200500","The following symptoms might occur when a PBR policy is configured through the Web interface:\r\r\nOn the PBR configuration page, select Match IPv4 ACL to enter the ACL configuration page. A user stays on the ACL configuration page after the user adds an ACL successfully.\r\r\nA user is redirected to the Web interface home page after the user adds a PBR policy that only has next hop information because the system does not check for empty fields for PBR policy configuration.\r\r","This symptom might occur if a PBR policy is configured through the Web interface.\r\r","R3115P05"]
["201609220002","In the help information of the jumboframe enable command, the maximum frame length is not 12000.\r\r","This symptom might occur if the help information is displayed for the jumboframe enable command.\r\r","R3115P05"]
["201609020107","When the EAD assistant redirect URL is configured through the Web interface, the system displays the \"configuration already exists\" message even if the configuration does not exist or take effect.\r\r","This symptom might occur if the EAD assistant redirect URL is configured through the Web interface.\r\r","R3115P05"]
["201607040335","A user cannot join the critical VLAN of MAC authentication when certain conditions exist.\r\r","This symptom might occur if the following conditions exist:\r\r\n(1) The user fails MAC authentication and is assigned to the guest VLAN.\r\r\n(2) The authentication server becomes unavailable. \r\r\n(3) The reset mac-authentication guest-vlan command is executed.\r\r","R3115P05"]
["201606270081","The switch does not process EAPOL v3 packets of 802.1X authentication and displays the \"Invalid protocol version ID\" message.\r\r","This symptom might occur if the switch receives EAPOL v3 packets of 802.1X authentication.\r\r","R3115P05"]
["201603140511","When LLDP is disabled globally, the CPU usage of the LLDP process immediately increases to 20%-30%.\r\r","This symptom might occur if LLDP is disabled globally.\r\r","R3115P05"]
["201610150081","When certain conations exist, an IRF fabric does not have MAC address entries for users who pass MAC authentication. As a result, the users cannot access the network.\r\r","This symptom might occur if the following conditions exist:\r\r\nMAC authentication is enabled on all ports of the IRF fabric.\r\r\nA large number of users move frequently, or ports go down and come up frequently.\r\r","R3115P05"]
["201607280521","CVE-2012-0036\r\r","Fixed vulnerability in curl and libcurl 7.2x before 7.24.0 that allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol.\r\r","R3115P03"]
["201606280241","CVE-2016-4953\r\r","Fixed vulnerability in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service by sending a spoofed packet with incorrect authentication data at a certain time.\r\r","R3115P03"]
["201606280241","CVE-2016-4954\r\r","Fixed vulnerability in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service by sending spoofed packets from source IP addresses in a certain scenario.\r\r","R3115P03"]
["201606280241","CVE-2016-4956\r\r","Fixed vulnerability in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service via a spoofed broadcast packet.\r\r","R3115P03"]
["201608290241","CVE-2009-3238\r\r","The get_random_int function in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms.\r\r","R3115P03"]
["201609060439","The operating status of BFD MAD for IRF is Faulty.\r\r","This symptom occurs if BAD MAD is enabled for both the IRF fabric and the peer device and the IRF fabric receives BFD MAD packets from the peer device.\r\r","R3115P03"]
["201607010063","Prompt messages occur in wrong order when the device decompresses a software image. The message that prompts users whether to delete the .ipe file appears before the message that prompts users to verify the legitimacy of the software image.\r\r","This symptom occurs if the software of a member device is upgraded at the CLI by using the boot-loader command.\r\r","R3115P03"]
["201609070269","PD detection and classification on a port are affected after PoE performs power negotiation on the port.\r\r","None.\r\r","R3115P03"]
["201608310495","The error message \"Scanning is interrupted\" occurs during ARP scanning.\r\r","This symptom occurs if ARP scanning for secondary address ranges is configured after the device software is upgraded to R3109P03 or a later software version.\r\r","R3115P03"]
["201608250027","The configuration of voice VLANs fails.\r\r","This symptom occurs if voice VLANs are configured in batch in the Web interface.\r\r","R3115P03"]
["201507220217","Maximum PI power negotiation fails on an interface configured with PoE.\r\r","This symptom occurs if the maximum PI power is automatically deployed on the interface and the device is rebooted after the configuration is saved.\r\r","R3115P03"]
["201605050154","After the COA issues an authorization ACL, the session-timeout timer and the offline function do not operate correctly for the authentication users. \r\r","This symptom occurs if the switch has MAC authentication or 802.1X authentication enabled. \r\r","R3115P01"]
["201607190589","When a port enabled with 802.1X authentication is repeatedly shut down and brought up, the 802.1X client directly connected to the port is logged off for authorization failure.\r\r","This symptom might occur if a port enabled with 802.1X authentication is repeatedly shut down and brought up, and an 802.1X client is directly connected to the port.\r\r","R3115P01"]
["201605180172","The undo speed auto downgrade and speed auto downgrade commands are executed on all ports of the device, and the running configuration is saved. After a reboot, automatic negotiation for speed downgrading is not enabled on all ports.\r\r","This symptom might occur if the following operations are performed:\r\r\nExecute the undo speed auto downgrade and speed auto downgrade commands on all ports.\r\r\nSave the running configuration and reboot the switch.\r\r","R3115P01"]
["201604260394","The short LACP timeout interval (3 seconds) is set on member ports of an aggregate interface. When the aggregate interface is down, traffic interruption lasts for 3 seconds instead of 6 seconds.\r\r","This symptom might occur if the short LACP timeout interval (3 seconds) is set on member ports of an aggregate interface.\r\r","R3115P01"]
["201605090525","CVE-2015-8138\r\r","Fixed vulnerability in ntpd which attackers may be able to disable time synchronization by sending a crafted NTP packet to the NTP client.\r\r","R3115P01"]
["201605090525","CVE-2015-7979\r\r","Fixed vulnerability in ntpd allows attackers to send special crafted broadcast packets to broadcast clients, which may cause the affected NTP clients to become out of sync over a longer period of time.\r\r","R3115P01"]
["201605090525","CVE-2015-7974\r\r","Fixed vulnerability in NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key.\r\r","R3115P01"]
["201605090525","CVE-2015-7973\r\r","Fixed vulnerability when NTP is configured in broadcast mode, a man-in-the-middle attacker or a malicious client could replay packets received from the broadcast server to all (other) clients, which cause the time on affected clients to become out of sync over a longer period of time.\r\r","R3115P01"]
["201605170547","CVE-2016-1550\r\r","Fixed vulnerability in ntpd function allow an attacker to conduct a timing attack to compute the value of the valid authentication digest causing forged packets to be accepted by ntpd.\r\r","R3115P01"]
["201605170547","CVE-2016-1551\r\r","Fixed vulnerability in ntpd allows unauthenticated network attackers to spoof refclock packets to ntpd processes on systems that do not implement bogon filtering.\r\r","R3115P01"]
["201605170547","CVE-2016-2519\r\r","Fixed vulnerability in ntpd will abort if an attempt is made to read an oversized value.\r\r","R3115P01"]
["201605170547","CVE-2016-1547\r\r","Fixed vulnerability where an off-path attacker can deny service to ntpd clients by demobilizing preemptable associations using spoofed crypto-NAK packets.\r\r","R3115P01"]
["201605170547","CVE-2016-1548\r\r","Fixed vulnerability where an attacker can change the time of an ntpd client or deny service to an ntpd client by forcing it to change from basic client/server mode to interleaved symmetric mode.\r\r","R3115P01"]
["201605170547","CVE-2015-7704\r\r","Fixed vulnerability in ntpd that a remote attacker could use, to send a packet to an ntpd client that would increase the client's polling interval value, and effectively disable synchronization with the server.\r\r","R3115P01"]
["201605250614","The speed auto a b  or speed auto a b c command is configured for an interface. After a reboot, only the  speed auto b or speed auto c  setting takes effect. \r\r","his symptom might occur if the following operations are performed:\r\r\nConfigure the speed auto a b or speed auto a b c command on the interface. \r\r\n(1) Save the configuration. \r\r\n(2) Reboot the device and use the .cfg configuration file to restore the configuration. \r\r","R3115"]
["201606070566","CVE-2016-2105\r\r","Fixed vulnerability in “EVP Encode” in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.\r\r","R3115"]
["201606070566","CVE-2016-2106\r\r","Fixed vulnerability in “EVP Encrypt” in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.\r\r","R3115"]
["201606070566","CVE-2016-2107\r\r","Fixed vulnerability in OpenSSL before 1.0.1t and 1.02h allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session.\r\r","R3115"]
["201606070566","CVE-2016-2108\r\r","Fixed vulnerability in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption).\r\r","R3115"]
["201606070566","CVE-2016-2109 \r\r","Fixed vulnerability in “asn” before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.\r\r","R3115"]
["201606070566","CVE-2016-2176 \r\r","Fixed vulnerability in “X509” in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from memory or cause a denial of service\r\r","R3115"]
["201605030246","When a PC is quickly plugged and unplugged, the switch considers the PC as online. \r\r","This symptom occurs if the following conditions exist:\r\r\nThe switch has both MAC authentication and 802.1X authentication enabled. \r\r\nThe PC performs MAC authentication. \r\r\nThe interface connecting to the PC has the unicast trigger or MAC authentication delay function configured. \r\r","R3113P05"]
["201606010228","An interface cannot correctly forward multicast packets. \r\r","This symptom occurs if both 802.1X authentication and MAC authentication are enabled on the interface and a user successfully passes MAC authentication. \r\r","R3113P05"]
["201605060393","After a master/subordinate switchover, the VLAN configurations of interfaces are lost. \r\r","This symptom occurs if the IRF subordinate member switch is rebooted and a master/subordinate switchover is performed. \r\r","R3113P05"]
["201605170504","In a three-chassis IRF fabric, after the master member is powered off and subordinate member 1 becomes the new master member, the VLAN configurations of interfaces on subordinate member 2 are lost. \r\r","This symptom occurs if the following operations are performed:\r\r\n(1) Use three switches to build an IRF fabric in a daisy-chain topology.\r\r\n(2) Power on the master member. \r\r\n(3) Power on subordinate member 1 and then subordinate member 2. \r\r\n(4) Save the configuration after the IRF fabric is formed. \r\r","R3113P05"]
["201601090054","When TCP port X is enabled, TCP port X + 2048*N is also enabled (N is an arbitrary integer). \r\r","This symptom occurs if TCP port X is enabled, for example, TCP port 23 is enabled by using the telnet server enable command. \r\r","R3113P05"]
["201603100197","On an inactivity aging-enabled interface, sticky MAC addresses age out before the secure MAC aging timer set by using the port-security timer autolearn aging command expires.\r\r","This symptom might occur if the following operations are performed on an interface:\r\r\nEnable port security and inactivity aging.\r\r\nUse the port-security timer autolearn aging command to set the secure MAC aging timer.\r\r","R3113P05"]
["201604091715","When a 10G Base-T port is connected to a specific device model, speed autonegotiation takes 20 to 30 seconds and the negotiation result can only be 1 Gbps.\r\r","This symptom might occur if a 10G Base-T port is connected to a specific device model.\r\r","R3113P03"]
["201604110101","After a period of time, PCs cannot join the 802.1X guest VLAN.\r\r","This symptom occurs if the following conditions exist:\r\r\nThe switch has both 802.1X authentication and MAC authentication enabled. \r\r\nThe switch connects to multiple PCs through a hub. \r\r\nThe PCs fail to pass the MAC authentication. \r\r","R3113P02"]
["201605180172   ","After the switch is rebooted, the speed downgrading autonegotiation configuration is undo speed auto downgrade on an interface that is configured with the speed auto downgrade command. \r\r","This symptom occurs if the following operations are performed\r\r","R3113P02"]
["201602010060","After the configuration of an IRF fabric is restored by using .cfg files, RIP route filtering configuration is lost.\r\r","This symptom might occur if the following operations are performed:\r\r\n(1) Enable RIP on an IRF fabric.\r\r\n(2) Configure the filter-policy import or filter-policy export command for an interface on a subordinate switch.\r\r\n(3) Restore the configuration of the IRF fabric by using .cfg files.\r\r","R3113P02"]
["201603010580","The VLAN dropdown list is unavailable on the Network > IPv6 > ND > New Neighbor Entry page of the Web interface.\r\r","This symptom might occur if IPv6 neighbor entries are configured on the Network > IPv6 > ND > New Neighbor Entry page of the Web interface.\r\r","R3113P02"]
["201508190171","After the MAC address entry and ARP entry of a MAC authentication user age out, the switch cannot generate new MAC address entry and ARP entry for the user. \r\r","This symptom might occur if the following conditions exist:\r\r\nMAC authentication is enabled, and MAC authentication offline detection is disabled. \r\r\nThe MAC address entry and ARP entry of a MAC authentication user age out. \r\r","R3113P02"]
["201507300295","When DHCP snooping is enabled on an IRF fabric using the ring topology, IRF member switches reboot repeatedly.\r\r","This symptom might occur if DHCP snooping is enabled on an IRF fabric using the ring topology.\r\r","R3113P02"]
["201604140100","MAC authentication users cannot come online if the server issues the Cisco-AVPair attribute to the switch.\r\r","This symptom might occur if the server issues the Cisco-AVPair attribute to the switch.\r\r","R3113P02"]
["201603120042","The switch does not respond to the security commands input by a console user.\r\r","This symptom might occur if the following conditions exist:\r\r\nLLDP and access authentication are enabled on the switch.\r\r\nThe intrusion protection action is set to disable on an interface, and intrusion protection is triggered because the phone connected to the interface fails authentication.\r\r","R3113P02"]
["201603230420","CVE-2016-0705\r\r","Fixed vulnerability when OpenSSL parses malformed DSA private keys and could lead to a DoS attack or memory corruption for applications that receive DSA private keys from untrusted sources.\r\r","R3113P02"]
["201603230420","CVE-2016-0798\r\r","Fixed vulnerability in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt.\r\r","R3113P02"]
["201603230420","CVE-2016-0797\r\r","Fixed vulnerability in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference).\r\r","R3113P02"]
["201603230420","CVE-2016-0799\r\r","Fixed vulnerability in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service which could lead to memory allocation failure or memory leaks.\r\r","R3113P02"]
["201603230420","CVE-2016-0702\r\r","Fixed vulnerability in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g which makes it easier for local users to discover RSA keys leveraging cache-bank conflicts, aka a \"CacheBleed\" attack.\r\r","R3113P02"]
["201603230420","CVE-2016-2842\r\r","Fixed vulnerability in the doapr_outch function in crypto/bio/b_print.c, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string.\r\r","R3113P02"]
["201603170138","CVE-2016-0701\r\r","  Fixed vulnerability in the DH_check_pub_key function which makes it easier for remote attackers to discover a private DH (Diffie-Hellman) exponent by making multiple handshakes with a peer that chose an inappropriate number. This issue affects OpenSSL version 1.0.2. and addressed in 1.0.2f. OpenSSL 1.0.1 is not affected by this CVE.\r\r","R3113P02"]
["201603170138","CVE-2015-3197\r\r","Fixed vulnerability when using SSLv2 which can be exploited in a man-in-the-middle attack, if device has disabled ciphers.\r\r","R3113P02"]
["201512280388","802.1X users are reauthenticated. \r\r","This symptom occurs if the following conditions exist:\r\r\nThe keep-online feature is enabled for 802.1X users. \r\r\nOnline 802.1X users receive EAPOL-Start packets. \r\r","R3113P02"]
["201602040568","An IP phone is reauthenticated every 30 seconds when the Web authentication server is unreachable. \r\r","This symptom occurs if the IP phone is connected to a port enabled with 802.1X authentication and Web authentication. \r\r","R3113P02"]
["201602160644","The ARP packets received from a peer device are not broadcasted in a VLAN. \r\r","This symptom occurs if ARP snooping is enabled in the VLAN. \r\r","R3113P02"]
["201510150328","The undo ssl version { tls1.0 | tls1.1 } disable command configuration does not take effect. \r\r","This symptom occurs if the switch is operating in FIPS mode or non-FIPS mode. \r\r","R3113P02"]
["201512290192","CVE-2015-3194\r\r","Fixed vulnerability which can be exploited in a DoS attack, if device is presented with a specific ASN.1 signature using the RSA.\r\r","R3113P02"]
["201512290192","CVE-2015-3195\r\r","Fixed vulnerability with malformed OpenSSL X509_ATTRIBUTE structure used by the PKCS#7 and CMS routines which may cause memory leak. \r\r","R3113P02"]
["201512290192","CVE-2015-3196\r\r","Fixed vulnerability where a race condition can occur when specific PSK identity hints are received.\r\r","R3113P02"]
["201512290192","CVE-2015-1794\r\r","Fixed vulnerability if a client receives a ServerKeyExchange for an anonymous Diffie-Hellman (DH) ciphersuite which can cause possible Denial of Service (DoS) attack.\r\r","R3113P02"]
["201602040025","After the lldp notification med-topology-change enable command is executed on a PoE-capable switch, the LLDP process exits unexpectedly and the IP phones connected to the PIs of the switch cannot operate correctly.\r\r","This symptom might occur if the command is executed on a PoE-capable switch and IP phones are connected to the PIs of the switch.\r\r\n\r\r","R3112"]
["201601110412","The CPU usage of an IRF fabric is high if LLDP is enabled on a large number of up interfaces.\r\r","This symptom might occur if LLDP is enabled for a large number of up interfaces on an IRF fabric.\r\r","R3112"]
["201602170470","The add or remove DNS server IP operation fails on the Network > DNS page of the Web interface.\r\r","This symptom might occur if a DNS server IP address is added or removed on the Network > DNS page of the Web interface.\r\r","R3112"]
["201601270478","The Resources > PKI page of the Web interface stays in the loading status.\r\r","This symptom might occur if the Resources > PKI page of the Web interface is accessed.\r\r","R3112"]
["201603100197","On an inactivity aging-enabled interface, sticky MAC addresses age out before the secure MAC aging timer set by using the port-security timer autolearn aging command expires.\r\r","This symptom might occur if the following operations are performed on an interface:\r\r\nEnable port security and inactivity aging.\r\r\nUse the port-security timer autolearn aging command to set the secure MAC aging timer.\r\r","R3112"]
["201601280398","When the Firefox browser is used to access the Web interface, the dropdown lists on some pages are unavailable.\r\r","This symptom might occur if the Firefox browser is used to perform one of the following operations:\r\r\nAdd IPv4 static routes on the Network > Static Routing page.\r\r\nCreate a rate limit for an interface on the QoS > Rate Limit page. \r\r\nConfigure IRF port bindings on the Device > IRF page.\r\r","R3112"]
["201512130013","An interface in a VLAN mapped to an MSTI fails to be assigned to the MSTI.\r\r","This symptom might occur if the link type of the interface is changed between trunk and access repeatedly.\r\r","R3111P07"]
["201601130674","After a user exits the console login page, the user cannot log in to the switch again through the console port. \r\r","This symptom occurs if the restore factory-default command is executed to restore factory default configuration. \r\r","R3111P07"]
["201601180281","A Web page is incorrectly displayed. To display the correct page, you must refresh the page. \r\r","This symptom occurs if you access the Device, Network, or QoS page first through Web and then access other pages. \r\r","R3111P07"]
["201512230197","The PoE status is incorrectly displayed for an interface. \r\r","This symptom occurs if you access the PoE configuration page of a PoE switch through Web. \r\r","R3111P07"]
["201511160443","During 802.1X authentication that uses the EAP method, the RADIUS packets exchanged in one user authentication process might be sent to different servers. \r\r","This symptom occurs if RADIUS server load sharing is enabled on the switch. \r\r","R3111P07"]
["201507310169","The subordinate IRF member switch might reboot unexpectedly. \r\r","This symptom might occur if patches are repeatedly installed and removed in an IRF fabric. \r\r","R3111P07"]
["201511300121","The switch acting as an NTP client cannot be synchronized to an NTP server.\r\r","This symptom occurs if the NTP server is a Cisco device.\r\r","R3111P03"]
["201510300354","A user goes offline immediately after the user comes online through 802.1X authentication.\r\r","This symptom occurs if the following conditions exist:\r\r\nAnother user comes online through MAC authentication before the 802.1X user.\r\r\nThe 802.1X user is assigned the same VLAN as the MAC-authenticated user.\r\r","R3111P03"]
["201512090334","The operation of backing up the configuration file fails. \r\r","This symptom occurs if the following conditions exist:\r\r\nThe MIB node hh3cCfgOperateServerAddress is configured to specify the file backup server. \r\r\nThe IP address of the file backup server is in the range of x.x.x.224 to x.x.x.255.\r\r","R3111P03"]
["201511180177","A port cannot exit the guest VLAN. \r\r","This symptom occurs if the following conditions exist:\r\r\nThe switch is enabled with 802.1X. \r\r\nThe port joins the 802.1X guest VLAN. \r\r\nThe MAC address of the MAC-VLAN entry has been learned by another port.\r\r","R3111P03"]
["201511190408","CVE-2015-7871\r\r","Cause ntpd to accept time from unauthenticated peers. \r\r","R3111P03"]
["201511190408","CVE-2015-7704\r\r","An ntpd client forged by a DDoS attacker located anywhere on the Internet, that can exploit NTP's to disable NTP at a victim client or it may also trigger a firewall block for packets from the target machine.\r\r","R3111P03"]
["201511190408","CVE-2015-7705\r\r","  The DDoS attacker can send a device a high volume of ntpd queries that are spoofed to look like they come from the client. The servers then start rate-limiting the client.\r\r","R3111P03"]
["201511190408","CVE-2015-7855\r\r","  Ntpd mode 6 or mode 7 packet containing an unusually long data value could possibly use cause NTP to crash, resulting in a denial of service.\r\r","R3111P03"]
["201501160412","The switch cannot send trap messages if it is rebooted after SNMP is configured. The switch can send trap messages correctly if it is rebooted again.\r\r","This symptom might occur if the following operations have been performed:\r\r\nConfigure SNMP.\r\r\nSave the configuration and reboot the switch.\r\r\nEnter the CLI and do not execute any commands.\r\r","R3111P03"]
["201511230171","The CPU occupied by the aclmgrd process is not released. As a result, the CPU usage of the switch is high. \r\r","This symptom occurs if master/subordinate switchover occurs in an IRF fabric. \r\r","R3111P03"]
["201512200032","On an IRF fabric enabled with 802.1X or MAC authentication, the CPU usage is high on the member switches that do not reboot after an active/standby MPU switchover occurs. \r\r","This symptom might occur if 802.1X or MAC authentication is configured on the IRF fabric, and an active/standby MPU switchover occurs.\r\r","R3111P02"]
["201512040456","A subordinate switch in an IRF fabric reboots repeatedly.\r\r","This symptom occurs if the .mdb file is deleted and the IRF fabric is power cycled.\r\r","R3111P01"]
["201505150471","A subordinate switch in an IRF fabric cannot discover neighbors because it cannot forward LLDP frames.\r\r","This symptom occurs if the l2protocol lldp tunnel dot1q command is configured on an interface on the subordinate switch.\r\r","R3111P01"]
["201511190389","The CPU usage of an IRF fabric is high.\r\r","This symptom occurs if the following conditions exist:\r\r\nA VLAN interface on the IRF fabric is configured with an IP address.\r\r\nA member switch in the IRF fabric is configured as a DHCP server.\r\r","R3111P01"]
["201511190084","The switch treats an Apply-Actions instruction in an OpenFlow flow entry as a Write-Actions instruction.\r\r","This symptom occurs if the controller deploys a flow entry with an Apply-Actions instruction.\r\r","R3110"]
["201510280475","A user goes offline immediately after the user comes online through 802.1X authentication.\r\r","This symptom occurs if the switch uses a RADIUS scheme and local accounting for 802.1X authentication.\r\r","R3110"]
["201511180069","The first 24 ports on a 52-port switch cannot communicate with the last 24 ports on the switch.\r\r","This symptom might occur if the switch is rebooted repeatedly.\r\r","R3110"]
["201508170320","The value of the entPhysicalVendorType node for a transceiver module cannot be obtained through a MIB tool.\r\r","This symptom occurs if the following operations have been performed:\r\r\nUse the combo enable fiber command on a combo interface to activate its fiber combo port.\r\r\nInstall the transceiver module into the fiber combo port.\r\r","R3110"]
["201511170067","OpenFlow flow entries fail to be deployed.\r\r","This symptom occurs if the controller deploys flow entries without actions to a flow table other than the first flow table of the multiple flow tables.\r\r","R3110"]
["201507160220","CVE-2014-8176\r\r","If a DTLS peer receives application data between the ChangeCipherSpec and Finished messages. May result in a segmentation fault or potentially, memory corruption.\r\r","R3109P16"]
["201507160220","CVE-2015-1788\r\r","When processing an ECParameters structure OpenSSL enters an infinite loop. This can be used to perform denial of service against any system which processes public keys, certificate requests or certificates.  \r\r","R3109P16"]
["201507160220","CVE-2015-1789\r\r","X509_cmp_time does not properly check the length of the ASN1_TIME string and/or accepts an arbitrary number of fractional seconds in the time string. An attacker can use this to craft malformed certificates and CRLs of various sizes and potentially cause a segmentation fault, resulting in a DoS on applications that verify certificates or CRLs.\r\r","R3109P16"]
["201507160220","CVE-2015-1790\r\r","The PKCS#7 parsing code does not handle missing inner EncryptedContent correctly. An attacker can craft malformed  PKCS#7 blobs with missing content and trigger a NULL pointer dereference on parsing.\r\r","R3109P16"]
["201507160220","CVE-2015-1791\r\r","If a NewSessionTicket is received by a multi-threaded client when attempting to reuse a previous ticket then a race condition can occur potentially leading to a double free of the ticket data.\r\r","R3109P16"]
["201507160220","CVE-2015-1792\r\r","When verifying a signedData message the CMS code can enter an infinite loop. This can be used to perform denial of service against any system which verifies signedData messages using the CMS code.\r\r","R3109P16"]
["201504130201","After successful 802.1X authentication, a port sets the tagging status to untagged for packets of a voice VLAN. As a result, IP phones receive untagged packets.\r\r","This symptom might occur if the following conditions exist:\r\r\n802.1X authentication and voice VLAN are configured on the port.\r\r\nThe device-traffic-class=voice attribute is configured on the authentication server.\r\r","R3109P14"]
["201509020039","User authentication fails. \r\r","This symptom occurs if the switch uses an ACS 5.6 server to perform AAA authentication. \r\r","R3109P14"]
["201509160335","User authentication fails. \r\r","This symptom occurs if the PEAP authentication method is used to perform 802.1X authentication. \r\r","R3109P14"]
["201509100463","The OpenFlow process restarts when the switch is receiving flow entries from the controller. \r\r","This symptom might occur if the switch is receiving flow entries from the controller.\r\r","R3109P14"]
["201509110280","The switch performs 802.1X reauthentication when it receives an EAPOL-Start message from a Windows client. After several reauthentication failures, the Windows client is put in silent state, and its NIC becomes unavailable. \r\r","This symptom might occur if the following conditions exist:\r\r\n802.1X authentication and voice VLAN are configured on the switch. \r\r\nThe authentication server is unreachable, and the Windows client is in the 802.1X critical VLAN.\r\r","R3109P14"]
["201509260060","The Web interface is slow in refreshing webpages or does not respond when PoE is configured for an IRF fabric. \r\r","This symptom might occur if the Web interface is used to configure PoE for an IRF fabric.\r\r","R3109P14"]
["201510130396","Some services might operate incorrectly or the switch might reboot unexpectedly. \r\r","This symptom occurs when a MIB management tool is used to obtain the power supply information of the switch. \r\r","R3109P14"]
["201509010289","The switch logs out a MAC-authenticated user that sends packets to the switch before the offline detect timer expires.\r\r","This symptom might occur if MAC authentication is configured.\r\r","R3109P09"]
["201508080233","The switch cannot start up.\r\r","This symptom occurs if the switch's flash memory is corrupted.\r\r","R3109P09"]
["201508310155","An interface advertises an Auto-negotiation TLV with an incorrect value and fails to negotiate with the peer interface.\r\r","This symptom occurs when LLDP is enabled globally and on the interface.\r\r","R3109P09"]
["201508120317","The poe max power configuration is automatically generated for an interface after the connected IP phone sends an LLDP frame to request power.\r\r","This symptom might occur if the connected IP phone sends an LLDP frame to request power from the interface.\r\r","R3109P09"]
["201509010156","The following switch models support the power design daughter card:\r\r\nHP 5130-24G-PoE+-4SFP+ (370W) EI Switch JG936A.\r\r\nHP 5130-48G-PoE+-4SFP+ (370W) EI Switch JG937A.\r\r\nHP 5130-24G-PoE+-4SFP+ (370W) EI Brazil Switch JG977A.\r\r\nHP 5130-48G-PoE+-4SFP+ (370W) EI Brazil Switch JG978A.\r\r","None.\r\r","R3109P09"]
["201506180249","CVE-2015-3143\r\r","cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request.\r\r","R3109P09"]
["201506180249","CVE-2015-3148\r\r","cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.\r\r","R3109P09"]
["201506100324","Software upgrade fails for an IRF fabric from the Web interface.\r\r","This symptom might occur when you upgrade software for the IRF fabric from the Web interface.\r\r","R3109P07"]
["201503050138","The flash memory of an IRF subordinate device is not available after the device reboots to rejoin the IRF fabric.\r\r","This symptom might occur if you have saved running configuration only for this subordinate device in the IRF fabric before you reboot the device.\r\r","R3109P07"]
["201504090194","CVE-2015-0209\r\r","  A malformed EC private key file consumed via the d2i_ECPrivateKey function could cause a use after free condition. This could lead to a DoS attack or memory corruption for applications that receive EC private keys from untrusted sources. \r\r","R3109P07"]
["201504090194","CVE-2015-0286\r\r","DoS vulnerability in certificate verification operation.  Any application which performs certificate verification is vulnerable including OpenSSL clients and servers which enable client authentication.\r\r","R3109P07"]
["201504090194","CVE-2015-0287\r\r","Reusing a structure in ASN.1 parsing may allow an attacker to cause memory corruption via an invalid write. Applications that parse structures containing CHOICE or ANY DEFINED BY components may be affected. \r\r","R3109P07"]
["201504090194","CVE-2015-0288\r\r","The function X509_to_X509_REQ will crash with a NULL pointer dereference if the certificate key is invalid. \r\r","R3109P07"]
["201504090194","CVE-2015-0289\r\r","  The PKCS#7 parsing code does not handle missing outer ContentInfo correctly. An attacker can craft malformed ASN.1-encoded PKCS#7 blobs with missing content and trigger a NULL pointer dereference on parsing.\r\r","R3109P07"]
["201505150249","TCP processing errors occur during an NQA operation. The operation fails, and services are interrupted on the switch.\r\r","This symptom might occur if an NQA operation is performed on the switch.\r\r","R3109P07"]
["201505150245","The switch cannot correctly send ARP packets to the controller.\r\r","This symptom might occur if a .mdb binary configuration file is used to restore OpenFlow configuration. \r\r","R3109P07"]
["201504200256","The switch cannot provide DHCP services correctly as a DHCP server.\r\r","This symptom might occur if the following conditions exist:\r\r\nA DHCP client has obtained an IP address from the DHCP server, and its address lease expires.\r\r\nThe client is configured as a BOOTP client.\r\r","R3109P07"]
["201505240024","Some PoE registers restore the default values after the PoE firmware is online updated.\r\r","This symptom might occur if a PoE firmware online update is performed.\r\r","R3109P07"]
["201506170069","An 802.1X client is forced to log off soon after it logs in.\r\r","This symptom occurs if the 802.1X authentication server assigns security policies such as ACL and user profile to the client after the client passes the 802.1X authentication.\r\r","R3109P07"]
["201505150457","A PoE switch cannot supply power over PoE to IP phones of some vendors.\r\r","This symptom occurs when you connect the IP phones to the switch and supply power over PoE.\r\r","R3109P05"]
["201506130010","A port is brought up and can forward packets when the MDIX mode negotiation fails.\r\r","This symptom occurs if the following operations have been performed:\r\r\nUse a straight-through cable to connect the port and its peer port.\r\r\nConfigure the same MDI (or MDIX) mode at both ends of the cable.\r\r","R3109P05"]
["201504020079","The Web interface is stuck at the Please wait… window when you upgrade system software in the Web interface.\r\r","This symptom occurs after you select the upgrade file and click Apply in the Web interface.\r\r","R3109P05"]
["201502110444","The switch reconnects to the SDN controller immediately after an unexpected disconnection from the controller.\r\r","This symptom might occur if an active/standby MPU switchover occurs when the controller is issuing a large number of flow table entries to the switch.\r\r","R3109P05"]
["201506100226","The port connected to an IP phone is removed from the voice VLAN after both the LLDP aging timer and the voice VLAN aging timer expire.\r\r","This symptom might occur if the switch establishes a neighbor relationship with the IP phone and advertises voice VLAN information to the IP phone through LLDP.\r\r","R3109P05"]
["201504210120","The PSE status setting of an IRF fabric is missing after a subordinate switch is rebooted.\r\r","This symptom might occur if the following conditions exist:\r\r\n\tThe IRF fabric contains multiple members.\r\r\n\tThe poe enable pse command is configured on the IRF fabric.\r\r\n\tThe subordinate switch is a PoE switch.\r\r","R3109P05"]
["201505110287","A user passes MAC authentication, but the authentication server fails to assign the authorization VLAN to the user.\r\r","This symptom occurs if the VLAN attribute issued by the authentication server in the Access-Accept packet ends with \\0x00.\r\r","R3109P05"]
["201504150187","CVE-2015-1799\r\r","Authentication doesn’t protect symmetric associations against DoS attacks.\r\r","R3109P05"]
["201505270138","The switch cannot use IP subnet-based VLANs to match and forward untagged packets. \r\r","This symptom might occur if IP subnet-based VLANs are configured on the switch.\r\r","R3109P05"]
["201412120103","After a reboot, the IDs of some members in an IRF fabric are changed to the default number 1. The affected members cannot rejoin the IRF fabric.\r\r","This symptom might occur if operations are frequently performed on the NOR flash memory, for example, save the configuration file frequently.\r\r","R3109P05"]
["201505110140","The switch reboots unexpectedly or cannot provide services correctly when a MAC address move occurs.\r\r","This symptom might occur if one of the following conditions exists on the switch:  \r\r\n100 or more ARP entries in a VLAN have the same MAC address, and the MAC address moves between ports.\r\r\nThe MAC address of an ARP entry moves between ports five times per second or more frequently.\r\r","R3109P05"]
["201505240023","A PoE switch fails to supply power over PoE to all PDs after the switch is power cycled.\r\r","This symptom might occur after the switch is power cycled.\r\r","R3109P04"]
["201510130155","The switch fails to obtain an IP address across VLANs.\r\r","This symptom might occur if the following conditions exist:\r\r\nA Layer 3 firewall is not deployed between the switch and the DHCP server.\r\r\nDHCP relay is enabled on the Layer 3 firewall, and DHCP snooping is enabled on the switch.\r\r","R3109P04"]
["201503310150","A PC cannot obtain an IP address from the DHCP server.\r\r","This symptom occurs if the following conditions exist:\r\r\nDHCP snooping is enabled by using the dhcp snooping enable command on the switch. \r\r\nThe private VLAN feature is configured on the switch.\r\r\nAn interface in a primary VLAN is connected to the DHCP server.\r\r\nAn interface in an associated secondary VLAN is connected to the PC.\r\r","R3109P03"]
["201504080340","A RADIUS server fails to identify Access-Request packets from the switch, and users fail the authentication.\r\r","This symptom occurs if Access-Request packets include invalid attribute values, for example, attribute values that end with \\0.\r\r","R3109P03"]
["201501290379","802.1X users fail to log in.\r\r","This symptom occurs if the authorization VLANs assigned by the authentication server use a format incompatible with the switch.\r\r","R3109P01"]
["201412180459","Traffic is not forwarded based on an OpenFlow group entry as expected.\r\r","This symptom occurs if the following operations have been performed:\r\r\nConfigure a group entry.\r\r\nDeploy a flow entry and configure the flow entry to use the group entry for forwarding.\r\r\nModify the output port of the group entry.\r\r","R3109P01"]
["201412150089","Portal users log out unexpectedly.\r\r","This symptom occurs if the following conditions exist:\r\r\nDHCP and portal roaming are enabled.\r\r\nThe portal users roam between APs by using mobile devices.\r\r","R3109P01"]
["201503020204","A PoE switch cannot supply power correctly.\r\r","This symptom occurs if the PoE module receives incorrect instructions.\r\r","R3109P01"]
["201412190083","The voice-vlan qos command does not take effect on an interface.\r\r","This symptom occurs if CDP-compatible LLDP is configured to advertise voice VLAN information on the interface.\r\r","R3109P01"]
["201501210272","CVE-2014-3569\r\r","The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.\r\r","R3109P01"]
["201501210272","CVE-2014-3571\r\r","A carefully crafted DTLS message can cause a segmentation fault in OpenSSL due to a NULL pointer dereference. This could lead to a Denial Of Service attack.\r\r","R3109P01"]
["201501210272","CVE-2015-0206\r\r","A memory leak can occur in the dtls1_buffer_record function under certain conditions. In particular this could occur if an attacker sent repeated DTLS records with the same sequence number but for the next epoch. The memory leak could be exploited by an attacker in a Denial of Service attack through memory exhaustion. \r\r","R3109P01"]
["201501210272","CVE-2015-0205\r\r","An OpenSSL server will accept a DH certificate for client authentication without the certificate verify message. This effectively allows a client to authenticate without the use of a private key. This only affects servers which trust a client certificate authority which issues certificates containing DH keys.\r\r","R3109P01"]
["201501210272","CVE-2014-3570\r\r","Bignum squaring (BN_sqr) may produce incorrect results on some platforms, including x86_64. This bug occurs at random with a very low probability, and is not known to be exploitable in any way.\r\r","R3109P01"]
["201501210272","CVE-2015-0204\r\r","An OpenSSL client will accept the use of an RSA temporary key in a non-export RSA key exchange ciphersuite. A server could present a weak temporary key and downgrade the security of the session.\r\r","R3109P01"]
["201501210272","CVE-2014-3572\r\r","An OpenSSL client will accept a handshake using an ephemeral ECDH ciphersuite using an ECDSA certificate if the server key exchange message is omitted. This effectively removes forward secrecy from the ciphersuite.\r\r","R3109P01"]
["201501210272","CVE-2014-8275\r\r","By modifying the contents of the signature algorithm or the encoding of the signature, it is possible to change the certificate's fingerprint. Only custom applications that rely on the uniqueness of the fingerprint may be affected.\r\r","R3109P01"]
["201412150184","The MAC address entry for a user successfully passing MAC authentication is aged before the offline detect timer expires. \r\r","This symptom occurs when MAC authentication is enabled and the mac-authentication timer offline-detect command is used set the offline detect timer for MAC authentication. \r\r","R3108P03"]
["201501140409","A user passing MAC authentication must wait 60 seconds before triggering new MAC authentication. \r\r","This symptom occurs when the following conditions exist: \r\r\nMAC authentication is enabled on an interface. \r\r\nA user that accesses the interface passes MAC authentication. \r\r\nThe shutdown and then undo shutdown commands are executed on the interface. \r\r","R3108P03"]
["201412150398","After the shutdown command is executed in an interface through which a user fails the 802.1X authentication, the interface is still in the 802.1X Auth-Fail VLAN configured for the interface. \r\r","This symptom occurs when the following conditions exist:\r\r\nThe dot1x quiet-period command is used in system view to enable the quiet timer. \r\r\n802.1X is enabled on the interface. \r\r\nAn 802.1X Auth-Fail VLAN is configured on the interface.\r\r","R3108P03"]
["201412040514","The switch first replies with a barrier reply and then prompts an error. \r\r","This symptom occurs when OpenFlow continues to deploy flow entries and sends barrier request messages after the deployed flow entries reach the specifications. \r\r","R3108P03"]
["201412310374","CVE-2014-9295.\r\r","Stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet.\r\r","R3108P03"]
["201410230226","SSL 3.0 Fallback protection.\r\r","OpenSSL has added support for TLS_FALLBACK_SCSV to allow applications to block the ability for a MITM attacker to force a protocol downgrade. Some client applications (such as browsers) will reconnect using a downgraded protocol to work around interoperability bugs in older servers. This could be exploited by an active man-in-the-middle to downgrade connections to SSL 3.0 even if both sides of the connection support higher protocols. SSL 3.0 contains a number of weaknesses including POODLE (CVE-2014-3566).\r\r","R3108P03"]
["201410230226","CVE-2014-3567\r\r","When an OpenSSL SSL/TLS/DTLS server receives a session ticket the integrity of that ticket is first verified. In the event of a session ticket integrity check failing, OpenSSL will fail to free memory causing a memory leak. By sending a large number of invalid session tickets an attacker could exploit this issue in a Denial of Service attack.\r\r","R3108P03"]
["201501150467","PoE cannot supply power correctly. \r\r","This symptom can be seen when the PoE chip becomes abnormal because of PoE communication errors. \r\r","R3108P03"]
["201501070257","The switch cannot communicate with a Cisco IP phone. \r\r","This symptom can be seen when the following conditions exist: \r\r\nThe switch is directly connected to the Cisco IP phone. \r\r\nCDP-compatible LLDP is enabled on the switch. \r\r\nThe sent LLDP protocol packets and CDP protocol packets carry voice VLAN TLVs. \r\r","R3108P03"]
["201407310086","The function of configuring the voice VLAN information that LLDP/CDP advertises does not take effect. \r\r","This symptom can be seen when the lldp tlv-enable med-tlv network-policy vlan-id command is configured on an interface to specify the voice VLAN information that LLDP/CDP will advertise to IP phones. \r\r","R3108P03"]
["201410140175","The system displays configuration errors though the configuration has been issued to an interface. \r\r","This symptom can be seen when you log in to the switch through the Web interface and shut down an IRF physical interface. \r\r","R3108P01"]
["201410210187","When a user performs MAC authentication, the system does not transmit information about the MAC authentication-enabled interface to the authentication server. As a result, the user fails to pass the authentication. \r\r","This symptom can be seen after you log in to the switch through the Web interface and enable MAC authentication on the interface. \r\r","R3108P01"]
["201410200402","The number of 802.1X online users collected in the Web interface is different from the actual number of 802.1X online users. \r\r","This symptom can be seen when 2000 users pass 802.1X authentication and come online. \r\r","R3108P01"]
["201408290076","PoE cannot be successfully enabled on a port. \r\r","This symptom can be seen when you log in to the switch through the Web interface and enable PoE on the port. \r\r","R3108P01"]
["201410200322","The maximum power of a PSE cannot be restored to the original value. \r\r","This symptom can be seen when the following procedure is performed: \r\r\nLog in to the switch through the Web interface. \r\r\nInput an incorrect value for the maximum PSE power. \r\r\nClick Cancel. \r\r","R3108P01"]
["201410100091","A black screen appears on the Web login page for the switch. \r\r","This symptom can be seen when you log in to the switch through the Web interface and test the cable connections for Ethernet interfaces of the switch multiple times.\r\r","R3108P01"]
["201312030126","Addressed SSRT101324.  A security bulletin for SSRT101324 should be published in January 2014.  Please see the security bulletin for additional details.\r\r","Addressed SSRT101324.  A security bulletin for SSRT101324 should be published in January 2014.  Please see the security bulletin for additional details.\r\r","R3108P01"]
["201410210004","Device will tear down TCP connection in established state when receives wrong TCP packet.\r\r","Only for those TCP connections in established state. When they receive TCP SYN packet which is carrying a sequence number falling into the connection receiving window, a RST packet will be sent and the connection will be dropped immediately.\r\r","R3108P01"]
["201406190088","CVE-2014-0224. \r\r","This symptom can be seen when Open SSL Server is used.\r\r","R3108P01"]
["201408220480","CVE-2014-3508\r\r","A flaw in OBJ_obj2txt may cause pretty printing functions such as X509_name_oneline, X509_name_print_ex et al. to leak some information from the stack. Applications may be affected if they echo pretty printing output to the attacker.\r\r","R3108P01"]
["201406270104","The MAC address entries of an STP edge port are deleted if the network topology changes.\r\r","This symptom might occur if a port is configured as an STP edge port, and network topology changes occur.\r\r","R3108P01"]

{"sheet":"Known Issues","index":2,"n_rows":1,"n_cols":5,"rows_kept":1,"cut":false,"hidden":false,"merged":[]}
["Bug ID","Symptom","Condition","Workaround","CMS Case ID"]