All,

Cambium has posted a statement on Shellshock vulnerability on our support 
website at  http://www.cambiumnetworks.com/support/shellshock ; and copied 
below.

Scott


Cambium Networks Devices Are Not Vulnerable to Shellshock 
(CVE-2014-6271<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6271>)
Since news of the virus called Shellshock 
broke<http://www.cnet.com/news/bigger-than-heartbleed-bash-bug-could-leave-it-systems-shellshocked/>,
 customers have asked if our products are secure. Our products are not 
vulnerable to this latest attack on Linux platforms, which takes advantage of a 
security flaw in bash, a specific command-line shell that we do not use:

PLATFORM             STATUS
ePMP 1000             not impacted
PTP 250                   not impacted
PTP 450                   not impacted
PTP 500                   not impacted
PTP 600                   not impacted
PTP 650                   not impacted
PTP 800                   not impacted
PMP 100                   not impacted
PMP 2xx                    not impacted
PMP 320                   not impacted
PMP 4xx                    not impacted
CMM                          not impacted
C3VoIP                      not impacted

Our network managing 
tools<http://www.cambiumnetworks.com/products/management-tools>, CNS, WM, CNUT, 
BAM and Prizm, are also not vulnerable and do not include an OS; they run on 
customers' operating systems. Customers are advised to patch their operating 
systems if they believe them to be susceptible after administering this 
diagnostic test from Red Hat<https://access.redhat.com/articles/1200223>.

Reply via email to