Shellshock

[Dominik]

Hi,

here is the link to the official response from Avaya to the shellshock vulnerabilitiy.

https://support.avaya.com/helpcenter/getGenericDetails?detailId=C2014926131554370002

Cheers

[Paul L]

important to note that the only Avaya networking appliance that is affected is the old VPN router.

the rest is all software. 

No ERS or VSP or WLAN products are affected.

[telecom116]

important to note that the only Avaya networking appliance that is affected is the old VPN router.

the rest is all software. 

No ERS or VSP or WLAN products are affected.

Hmm, from what I see here the VPN Router (formerly Contivity) are NOT affected as they run an alternate shell.

https://support.avaya.com/ext/index?page=content&id=SOLN256919

The VPN Gateway3050/3070/3090 products have a Low rating as the user account that is affecting is disabled by default.

https://downloads.avaya.com/css/P8/documents/100183045

[telecom116]

Just received notice from Avaya - more Avaya hardware affected by the Shellshock vulnerability are items in the former Radvision video conferencing portfolio, including, but not limited to:
- Scopia Pathfinder
- Scopia Elite MCU 5000
- Scopia Elite MCU 6000