Hi

We use nessus to scan our network. My most recent scan reports several openssl vulnerabilitis with a cvss score of 9.3, (rated HIGH), see below for details. The products found affected are:

Dell idrac6 1.97

Dell idrac7 1.57.57

Nessus says that the vulnerabilty is confirmed, and the openssl version could also be vulnerable to other openssl issues release on the same day as the OpenSSL 'ChangeCipherSpec' MiTM Vulnerability" released on the 5th of june.

Is this confirmed by dell? will patches be released for this vulnerabilties?

CVE-2010-5298, CVE-2014-0076, CVE-2014-0195, CVE-2014-0198, CVE-2014-0221, CVE-2014-0224, CVE-2014-3470