Hi we are using c2851(CME) with CUE version 8.6.4 and cp7965g ipphones(firmware 9.3.1). we are getting some vulnerability messages which i attached the report. so we have decided to disable http in Cue and ssh in IP phone. can you suggest how to disable the services. thanks
For disabling the SSH to phone, you need to do the following.
service phone sshAccess 1
CUE supports both HTTP and HTTPS.
You need to do the following to enable HTTPS.
1.. In CUE config mode - "crypto key generate rsa label GUI modulus 1024"
4. In CUE config mode - "web session security keyLabel GUI"
3. enable TLS 1.0 in IE and Firefox