Help to deal with Open SSL/TLS MITM vulnerability (CVE-2014-0224) for BE6K (CUCM 8.6)

[Jorge Luis Covenas Chiroque]

Hi all.

End Customer reported this vulnerability: https://www.openssl.org/news/secadv_20140605.txt

I have found this at Cisco http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl

How can I know what version of Open SSL I have in Server (It is an MCS7828I5)?

How can I avoid or fix this vulnerability?

Regards.

Jorge

[Jaime Valencia · Accepted solution]

HW has absolutely nothing to do with this, you need to check your full CUCM version in the bug.

The link you posted has the related bug for each product, and within it, the fixed versions.

[Jorge Luis Covenas Chiroque]

Thanks Jaime.

I have checked the part of Affected Products >> Vulnerable Products and find the Bug for CUCM.

https://tools.cisco.com/bugsearch/bug/CSCup22670

Best Regards.