Forum Discussion

Amit_Karnik's avatar
Amit_Karnik
Icon for Nimbostratus rankNimbostratus
Dec 29, 2014

Any official statement on latest openssl vulnerability CVE-2014-3569 ?

Are any versions impacted for CVE-2014-3569 ?   The NVD score is Medium but it seems so easy to exploit this remotely and it is also pre-authentication so mandatory client certificates will not h...
application delivery
devops
iRules
LTM
security
TMOS
TMSH
Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Dec 29, 2014

Since it is OpenSSL I would assume it would only affect the management GUI and potentially SSL profiles that use COMPAT ciphers. As with many OpenSSL vulnerabilities, one would assume if you are using the NATIVE cipher stack, the traffic interface shouldn't be affected.