New TelePresence Server 4.1 software
See the release notes here
8710 download it here, 7010 download it here, 320 download it here, 310 download it here and VTS download it here
Conferencing
End-of-Sale and End-of-Life Announcement for the Cisco TelePresence Server 7010
Cisco announces the end-of-sale and end-of-life dates for the Cisco TelePresence Server 7010. The last day to order the affected product(s) is June 22, 2015. Customers with active service contracts will continue to receive support from the Cisco Technical Assistance Center (TAC) as shown in Table 1 of the EoL bulletin. Table 1 describes the end-of-life milestones, definitions, and dates for the affected product(s). Table 2 lists the product part numbers affected by this announcement. For customers with active and paid service and support contracts, support will be available under the terms and conditions of customers’ service contract.
C Series
The Heartbleed Bug
The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs).
The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. This allows attackers to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users.
The HeartbleedBug and Cisco
OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products
Multiple Cisco products incorporate a version of the OpenSSL package affected by a vulnerability that could allow an unauthenticated, remote attacker to retrieve memory in chunks of 64 kilobytes from a connected client or server.
The vulnerability is due to a missing bounds check in the handling of the Transport Layer Security (TLS) heartbeat extension. An attacker could exploit this vulnerability by implementing a malicious TLS or Datagram Transport Layer Security (DTLS) client, if trying to exploit the vulnerability on an affected server, or a malicious TLS or DTLS server, if trying to exploit the vulnerability on an affected client. An exploit could send a specially crafted TLS or DTLS heartbeat packet to the connected client or server. An exploit could allow the attacker to disclose a limited portion of memory from a connected client or server for every heartbeat packet sent. The disclosed portions of memory could contain sensitive information that may include private keys and passwords.
Please note that the devices that are affected by this vulnerability are the devices acting as an SSL server terminating SSL connections or devices acting as an SSL Client initiating an SSL connection. Devices that are simply traversed by SSL traffic without terminating it are not affected.
This advisory will be updated as additional information becomes available. Cisco will release free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities may be available. This advisory is available at the following link:
http://www.cisco.com/web/about/security/intelligence/ERP-Heartbleed.html
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed
The following Cisco products have been analyzed and are not affected by this vulnerability:
- Cisco IP Video Phone E20
- Cisco TelePresence MXP Series
- Cisco TelePresence Advanced Media Gateway Series
- Cisco TelePresence IP VCR Series
- Cisco TelePresence MCU all series
The following Cisco products are currently under investigation:
- Cisco TelePresence Movi with Precision HD USB / Jabber Video
- Cisco TelePresence Recording Server
- Tandberg 770/880/990 Series Tandberg
- Codian ISDN GW 3210/3220/3240
- Tandberg Codian MSE 8310 model
Vulnerable TelePresence Products to Heartbleed
Endpoints
- Cisco Desktop Collaboration Experience DX650 [CSCuo16892]
- Cisco TelePresence EX Series [CSCuo26378]
- Cisco TelePresence Integrator C Series [CSCuo26378]
- Cisco TelePresence MX Series [CSCuo26378]
- Cisco TelePresence Profile Series [CSCuo26378]
- Cisco TelePresence System 1000 [CSCuo20210]
- Cisco TelePresence System 1100 [CSCuo20210]
- Cisco TelePresence System 1300 [CSCuo20210]
- Cisco TelePresence 1310 [CSCuo20210]
- Cisco TelePresence System 3000 Series [CSCuo20210]
- Cisco TelePresence System 500-32 [CSCuo20210]
- Cisco TelePresence System 500-37 [CSCuo20210]
- Cisco TelePresence SX Series [CSCuo26378]
- Cisco TelePresence TX 9000 Series [CSCuo20210] Version 6.1.2.0 and prior
Infrastructure
- Cisco Unified Communications Manager (UCM) 10.0 [CSCuo17440]
- Cisco TelePresence Video Communication Server (VCS) [CSCuo16472]
- Cisco Expressway Series [CSCuo16472]
- Cisco TelePresence Conductor [CSCuo20306]
- Cisco TelePresence IP Gateway Series [CSCuo21597]
- Cisco TelePresence ISDN GW 3241 [CSCuo21486]
- Cisco TelePresence ISDN GW MSE 8321 [CSCuo21486]
- Cisco TelePresence ISDN Link [CSCuo26686]
- Cisco TelePresence Serial Gateway Series [CSCuo21535]
- Cisco TelePresence Server 8710, 7010 [CSCuo21468]
- Cisco TelePresence Server on Multiparty Media 310, 320 [CSCuo21468]
- Cisco TelePresence Server on Virtual Machine [CSCuo21468]
- Cisco TelePresence Supervisor MSE 8050 [CSCuo21584]
Conductor
TelePresence Server Conferencing Capacity on Various Platforms
* 104 is the maximum number of calls that is possible on a TelePresence Server.
‡ The TelePresence Server needs the Third Party Interop feature key to host conferences with multi-screen endpoints that are not third party interoperable. This includes all multi-screen endpoints except the Cisco TelePresence System T3 and TIP-compatible endpoints.
† Requires TelePresence Conductor.
Note: The table above assumes that calls of one type are being used to reach these maximum values. To calculate the total number of licenses required for a variety of concurrent calls, sum the screen licenses required for each concurrent call.