04-09-2014 11:08 AM - edited 03-10-2019 12:12 AM
Hello Experts,
I need to rule out that we have affected openSSL version 1.0.1 running on our devices. I need to know what is the version of openSSL that is current on the following platforms:
Cisco PIX
Cisco FWSM
Cisco ISR
Cisco VPN Concentrator
I know ASA runs 0.9.8f and I know that PIX and Concentrator are very old, and they might run an older version, however for a security assessment I need to rule those out too.
Does anyone know what is the version for these platforms?
Thanks in advance.
04-09-2014 10:09 PM
FYI for everyone else: The world calls this vulnerability as "Heartbleed" but, somehow, it's called as "Heartbeat" by Cisco.
04-25-2014 06:15 PM
The bug is named Heartbleed, and Cisco refers to it as such. Heartbeat is the section of code that contains the bug, and thus where the name Heartbleed came from in the first place.
04-10-2014 04:44 PM
The definitive source is and will continue to be the Cisco Security Advisory. It has already been updated several times today. Please keep checking back to it at the following URL:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed
That said, the Pix and VPN Concentrator development and code release ended prior to the release of openssl with the vulnerability so I would hazard an educated guess that you won't have any problems with respect to this particular vulnerability. THAT said, if you're concerned about security vulnerabilities why are you running products with associated code that has not had other documented bugs and vulnerabilities patched for at least several years?
The ISR G2 will almost certainly depend on the IOS level and whether you are using any of the ssl-related features.
04-28-2014 11:39 AM
Hi,
You can go to http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed for information about the affected Cisco products from this vulnerability.
Regards,
Kush
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide