Telepresence endpoint evaluation for CVE-2014-6271 and CVE-2014-7169 aka "Shellshock"

[Magnus Ohm]

Please refer to the Cisco Security Advisory for more information.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash

BUG ID: CSCur02591

/Magnus

[Hes]

Hi Magnus,

Is blocking the management ports (HTTP/HTTPS/SSH/Telnet/basically everything under port 1024) sufficient to mitigate this issue for TelePresence systems?
Or is the issue also present on the SIP and H.323 ports?

[Darren McKinnon]

This is a great question.  Magnus - your thoughts?