Cisco TelePresence products vulnerable to CVE-2014-0160 -aka Heartbleed

[migarcia7707]

the affected version is 5.0.0 and the fixes are on versions 5.1.11, 6.3.1 and 7.1.1 but our telepresence c40's versions are TC6.0.1.65adebe and TC6.2.0.20b1616. does that mean we're not affected?

[rosaho]

This discussion has been reposted from Additional Communities to the TelePresence community.

[Jens Didriksen]

The affected versions are: TC5.0.2.TC5.1.3, TC5.1.4, TC5.1.5, TC5.1.6, TC5.1.7, TC5.1.8, TC6.0.0, TC6.0.1, TC6.1.0, TC6.1.1, TC6.1.2, TC6.2.0, TC6.2.1, TC6.3.0, TC7.0.2, TC7.1.0 - so suggest you upgrade as you are affected.

References: https://tools.cisco.com/bugsearch/bug/CSCuo26378

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed

/jens

Please rate replies and mark question(s) as "answered" if applicable.