Shellshock vulnerability at VPN 3005

Yury Skobkarev · ‎10-08-2014

We have some VPN 3005 concentrators. I can't find any specific information if they are susceptible to the "ShellShock" bug. Despite the fact that they are not supported officially already I suppose, some consideration regarding this vulnerability have to get done.

Thank you very much in advance.

Phillip Remaker · ‎10-08-2014

The Cisco PSIRT is investigating the impact of this vulnerability on Cisco products and will disclose any vulnerabilities according to our security policy, which is available at http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html .

An INTERIM Cisco Security Advisory was published on September 25th, 2014 and is available at the following URL:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash

The Cisco PSIRT will update this Cisco Security Advisory as more information becomes available.