CVE-2014-7169 Bash remote code execution. Any telepresence systems vulnerable? Patches?

[jbru]

CVE-2014-7169 was published a few days ago and like the title states it is a remote code execution through a bash vulnerability.

I know at least the HDX and Touchpanel devices are built on linux and I'm wondering if they are vulnerable to this?  If so, is Polycom coming out with a patch for it?

[Russell_Polycom · Accepted solution]

Hello, 

If you haven't done so you should check this link here. http://support.polycom.com/PolycomService/support/emea/support/documentation/security_center.html

There is right now this out on the web site. 

• Security Advisory Relating to Bash shell arbitrary code execution on Various Polycom Products

[jbru]

Thank you!  That's what I was looking for!