Siemens: HIPath 4000 Expert Accss - Connect v

[ashutosh2501]

fEW QUESTIONS

iS HIPATH EXPERT aCCESS USES JAWA? IF YES WHICH VERSION?

iS IT VULNERABLE TO LOG4j APACHE THREAT?

iF YES WHAT IS THE REMEDY?

IF WE REMOVE THE PROGRAM ACCESS MACHINE FROM INTERNET / LAN, IS IT SUFFICIENTLY PROTECTED AGAINST LOG4J?

 

[adibv]

Hipath 4000 Expert Access/Comwin is not affected by LOG4j threat.

 

[LAAZ]

Dear Team,

How to resolve this vulnerability..

I am from voice team and who is responsible to resolve this vulnerability by IT or IT Security don't know.

But customer is keep on asking to update the patch in OSCC,Conceirge and DLS.

Thanks and regards

 

[adibv]

https://networks.unify.com/security/advisories/OBSO-2112-01.pdf

 

[LoPath]

OSCC is definitely affected.

LoPath
Maintain HiPath 4000 V5 & V6, OpenScape Xpert V4 & V6, OpenScape Xpressions V7, OpenScape Contact Center V8, OpenScape Voice V9