×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Disable SSH in IP Phone and HTTP in CUE(module)

Answered Question
Jul 29th, 2013
User Badges:

Hi we are using c2851(CME) with CUE version 8.6.4 and cp7965g ipphones(firmware 9.3.1). we are getting some vulnerability messages which i attached the report. so we have decided to disable http in Cue and ssh in IP phone. can you suggest how to disable the services. thanks

Correct Answer by Rohit Gupta about 4 years 2 weeks ago

For disabling the SSH to phone, you need to do the following.


telephony-service

service phone sshAccess 1


CUE supports both HTTP and HTTPS.

You need to do the following to enable HTTPS.


1.. In CUE config mode - "crypto key generate rsa label GUI modulus 1024"

2. reload

4. In CUE config mode - "web session security keyLabel GUI"

3. enable TLS 1.0 in IE and Firefox

4. In browser address bar enter:  https:// OR http://:443

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.5 (2 ratings)
Loading.
paolo bevilacqua Mon, 07/29/2013 - 23:27
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    Founding Member

In short, do not bother. Thjere is no vulnerability, and no issue. Espacially CUE is designed to work with HTTP all the time. Eg users accessing their setting or mailboxes over the web.

sasikumarnaren84 Tue, 07/30/2013 - 00:05
User Badges:

Hi Paolo,


            Thanks for your reply, Instead of http can i use the https service and how do you evaluate the ssh message? 

paolo bevilacqua Tue, 07/30/2013 - 00:12
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    Founding Member

No, CUE supports HTTP only.

As mentioned above, you can ignore SSH in the phone.

Correct Answer
Rohit Gupta Wed, 07/31/2013 - 00:48
User Badges:

For disabling the SSH to phone, you need to do the following.


telephony-service

service phone sshAccess 1


CUE supports both HTTP and HTTPS.

You need to do the following to enable HTTPS.


1.. In CUE config mode - "crypto key generate rsa label GUI modulus 1024"

2. reload

4. In CUE config mode - "web session security keyLabel GUI"

3. enable TLS 1.0 in IE and Firefox

4. In browser address bar enter:  https:// OR http://:443

Actions

This Discussion