Solved: Disable SSH in IP Phone and HTTP in CUE(module)

sasikumarnaren84 · ‎07-29-2013

Hi we are using c2851(CME) with CUE version 8.6.4 and cp7965g ipphones(firmware 9.3.1). we are getting some vulnerability messages which i attached the report. so we have decided to disable http in Cue and ssh in IP phone. can you suggest how to disable the services. thanks

rohitgu2 · ‎07-31-2013

For disabling the SSH to phone, you need to do the following.

telephony-service

service phone sshAccess 1

CUE supports both HTTP and HTTPS.

You need to do the following to enable HTTPS.

1.. In CUE config mode - "crypto key generate rsa label GUI modulus 1024"

2. reload

4. In CUE config mode - "web session security keyLabel GUI"

3. enable TLS 1.0 in IE and Firefox

4. In browser address bar enter: https:// OR http://:443

View solution in original post

paolo bevilacqua · ‎07-29-2013

In short, do not bother. Thjere is no vulnerability, and no issue. Espacially CUE is designed to work with HTTP all the time. Eg users accessing their setting or mailboxes over the web.

sasikumarnaren84 · ‎07-30-2013

Hi Paolo,

Thanks for your reply, Instead of http can i use the https service and how do you evaluate the ssh message?

paolo bevilacqua · ‎07-30-2013

No, CUE supports HTTP only.

As mentioned above, you can ignore SSH in the phone.

rohitgu2 · ‎07-31-2013