Disable ssl version 2 and 3 and enable tls version on cisco IP Phone 7941G

[rajeshcv49]

Hello All,

" ssl version 2 and 3 detection" vulnerability found on cisco ip phone 7941G, can some one help me fix this issue,

all phones are using sccp protocol

call manager version 8.6.

Really appreciate your help.  

[Jonathan Schulenberg · Accepted solution]

The Cisco 7900 series phones do not support TLS 1.2 nor do they support disabling older versions. Your options are to replace it with a current generation phone, disable the phone’s web server entirely or disable HTTPS on it. The last two options may break things that leverage the XML SDK (eg paging). Disabling the web server entirely also prevents you from getting console logs for troubleshooting.

CUCM 8.6 can’t support these requirements either, has multiple known security vulnerabilities, and is end of sale. You really need to begin planning an upgrade of the server infrastructure and likely an endpoint refresh.

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/uc_system/TLS/TLS-1-2-for-On-Premises-Cisco-Collaboration-Deployments.html

[rajeshcv49]

Hi Janathan,

We migrating the voip infrastructure cucm version 11.xx and latest ip phone,  For time begin i disabled the web access for phone.  

Thank for your help.