For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

John_Heyer_1508's avatar
John_Heyer_1508
Icon for Cirrostratus rankCirrostratus
Jul 10, 2015

The affected OpenSSL versions have been out less than a month:

 

https://www.openssl.org/news/openssl-1.0.2-notes.html

 

https://www.openssl.org/news/openssl-1.0.1-notes.html

 

I doubt any vendor has based their software off these version. Also, this really more of a client side vulnerability than server, so you'd have to trick the device in to opening a connection to a non-trusted site, which is not going to be easy.

 

In short, nothing to see here, move along...