topic Re: Heartbleed bug in ZoneDirector

Heartbleed bug

tobias_brisach — Wed, 09 Apr 2014 06:54:02 GMT

Which versions of openssl is used in Ruckus Software?

Is the heartbleed bug a problem for this systems, is the heartbeat extensions compiled?

Re: Heartbleed bug

keith_redfield — Wed, 09 Apr 2014 17:04:06 GMT

We are currently investigating the impact of this issue on our full product line.

So far we can confirm the following:

ZoneDirector and ZoneFlex AP product line not impacted
SCI, SPoT services not impacted.
Zoneflex switches not impacted

We will update with more information as it becomes available

Re: Heartbleed bug

scott_trulock — Thu, 10 Apr 2014 18:29:12 GMT

This reply was created from a merged topic originally titled
Is any Ruckus device vulnerable to the Heartbleed exploit?.

Has Ruckus evaluated security issues with OpenSSL?

http://www.dshield.org/forums/diary/H...

Re: Heartbleed bug

keith_redfield — Mon, 14 Apr 2014 21:52:48 GMT

We've just posted our formal security advisory on Heartbleed/CVE-2014-0160 and it's impact on Ruckus devices - full details here:

http://www.ruckuswireless.com/security
https://support.ruckuswireless.com/se...

(bottom entry in the list)

-Keith