Unsolved
This post is more than 5 years old
18 Posts
0
1605
February 9th, 2017 11:00
Security Updates
I have been reading through the changelogs in Release Notes for the different firmware version and I have noticed that they don't provide technical information related to security updates. Is there another resource where I can find information about if a specific firmware has fixed specific security vulnerabilities?
No Events found!
Judd.Tracy
18 Posts
0
February 9th, 2017 15:00
So if my vulnerability scan team finds TLS/SSL vulnerabilities there is no way for me to know if a firmware is going to fix it? This seems very odd for a system that went through Common Criteria evaluation.
My issues is I have an array running the 7 series of firmwares which I guess are no longer being updated. I haven't developed a transition plan for going to 8 or 9 but now need to rush it a little because my security team is pushing me to get this fixed. But I can't even tell if the latest firmwares from 8 or 9 will fix the issue. Leaves me in a tough position.
Origin3k
6 Operator
•
2.4K Posts
•
12.4K Points
1
February 9th, 2017 15:00
FW 8.x removes TLS so your problem is fixed.
Regards
Joerg