[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.
https://www.yealink.com/ydmp-freetrial-2020


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
OpenSSL/Heartbleed & OpenVPN/OpenSSL in phones
Author Message
jasonjayr Offline
Junior Member
**

Posts: 1
Joined: Apr 2014
Reputation: 0
Post: #1
OpenSSL/Heartbleed & OpenVPN/OpenSSL in phones
Has Yealink made a statement regarding the OpenSSL/Heartbleed TLS issue? We use OpenVPN on our T26 & T28 phones and I know the version on our PC's needed updating.

If folks haven't heard about it, check out http://heartbleed.com. This was a very serious vulnerability in OpenSSL that was broken for almost 2 years.

Is there a firmware upgrade necessary or in the works?

Thanks
04-15-2014 12:26 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Yealink Support Offline
Administrator
*******

Posts: 2,683
Joined: Dec 2012
Reputation: 25
Post: #2
RE: OpenSSL/Heartbleed & OpenVPN/OpenSSL in phones
I think you should upgrade the version of OpenSSL but not Yealink phones.
04-15-2014 09:54 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
jcvh Offline
Junior Member
**

Posts: 14
Joined: Nov 2013
Reputation: 0
Post: #3
RE: OpenSSL/Heartbleed & OpenVPN/OpenSSL in phones
Is that all?

Guys, are you even taking this seriously enough? Can you elaborate a little?

At least, (imho) you should make an statement regarding what version of OpenSSL, OpenVPN, and whatever https server are you using in the diverse firmwares of your phones, so we can know for sure if can we be affecetd or not.

Given the case, the phones may leak the admin password of the phone, and/or the SIP credentials, anyone of the two serious enough, if you ask me.

In the other hand, i have been checking some terminals with the latest firmware, and the https part seems to be fine, at least.

Regards!
04-16-2014 12:49 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Yealink Support Offline
Administrator
*******

Posts: 2,683
Joined: Dec 2012
Reputation: 25
Post: #4
RE: OpenSSL/Heartbleed & OpenVPN/OpenSSL in phones
Hi jcvh,

Thanks to your opinions. I have submitted your request to our product department.
(This post was last modified: 04-16-2014 08:03 PM by Yealink Support.)
04-16-2014 12:18 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Yealink Support Offline
Administrator
*******

Posts: 2,683
Joined: Dec 2012
Reputation: 25
Post: #5
RE: OpenSSL/Heartbleed & OpenVPN/OpenSSL in phones
[Announcement]Yealink Heartbleed Security Advisory
04-18-2014 05:04 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 


Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  Phones no longer support Let Encrypt johnbeaumont 20 31,361 01-19-2024 08:09 AM
Last Post: tom-nbb
  Firmware phones T33G esoriano 1 886 12-13-2023 02:50 AM
Last Post: complex1
  MP54 Teams phones sometimes fail to log in jzcase 0 673 11-21-2023 12:26 AM
Last Post: jzcase
  Phones without a "server/PBX" kermitxyz 0 655 11-13-2023 02:26 AM
Last Post: kermitxyz
  Do Yealink IP Phones Support ZRTP? nolto 0 1,346 01-15-2023 11:35 PM
Last Post: nolto
  integrate Salesforce CRM to Yealink phones mehdi.ett 3 11,701 12-21-2022 02:20 PM
Last Post: Arun Kiran
  MP50 Phones not dialling az@a2z-computing.com 7 8,451 09-23-2022 09:35 PM
Last Post: Oksania
  Problem of OpenVPN simonleung 0 1,864 04-26-2022 02:24 PM
Last Post: simonleung
  V83 and openvpn problem avayax 12 24,378 03-04-2022 12:10 AM
Last Post: rfrantik@rfcinc.com
  Reconfigure a hundred phones? poznaniak 2 4,612 01-26-2022 06:41 PM
Last Post: poznaniak

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication