Vulnerabilities TLSv1 /1.1 is enabled and the server supports at least one cipher.

[Anonymous]

Getting Vulnerabilities TLSv1 /1.1 is enabled and the server supports at least one cipher in security scan on Poly VVX 300. Kindly suggest how to fix.

[SteffenBaierUK]

Hello @Sanjay_EGI ,

Welcome to the Poly Community.

I am unsure if you are trying to tell us about a security issue or if you are asking us something.

The FAQ contains:

Sep 6, 2017 Question:Can you change the minimum required TLS Version on a Poly Phone?

Resolution: Please check => here <=

and/or

Sep 21, 2016 Question:Can you change the Cipher Suite’s on Poly IP Phones?

Resolution: Please check => here <=

It would be great if you post would include the currently used software version.

If you still struggle, and cannot find an answer via using the community search and or other members respond you can always get this into support.

In order to raise a support ticket, you need to work with your Poly reseller as they may need to do this for you.

End Customers are usually unable to open a ticket directly with Poly support. Available End User Poly services offerings are detailed here

If this is some sort of an Internet discounter providing your MAC address or your Poly devices serial will enable us to look up who would be able to support you. This may not be who you purchased the Poly device from.

If the unit is no longer within the warranty please be prepared to Pay Per Incident / PPI. This is all outlined in detail here

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

[Anonymous]

Hi Steffen,

We are getting subjected Vulnerabilities in VVX300 poly sound station. I am asking your suggestion /advice how to fix this Vulnerabilities.

Regards, 

Sanjay Roy

[SteffenBaierUK]

Hello @Sanjay_EGI ,

A VVX is not a SoundStation.

What Software version do you see this and did you look at the above quoted FAQ section?

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

[Anonymous]

Hi Steffen,

VVX 300 IP business media phone , current software version is: 

UC Software Version

5.9.5.0614

also go throughe the FAQ ,TLS setting is same as suggested . How to mitigate this Vulnerabilities TLSv1 /1.1

regards,

Sanjay Roy

[SteffenBaierUK]

Hello @Sanjay_EGI ,

The next step would be to open a support ticket as already outlined.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier