<HTML>
<HEAD>
<TITLE>RPS vulnerability, Yealink responds.</TITLE>
</HEAD>
<BODY>
<FONT FACE="Monaco, Courier New"><SPAN STYLE='font-size:11pt'>Hey Guys,<BR>
<BR>
As you know theres been a big buzz about Remote Provisioning Services and vulnerabilities that are possible.<BR>
<BR>
We have been in touch with Yealink, and they have released the following statement.<BR>
<BR>
----- Snip -------<BR>
</SPAN></FONT><FONT SIZE="4"><FONT FACE="Times New Roman"><SPAN STYLE='font-size:13pt'> <BR>
Recently we received reports stating there were security vulnerabilities in Yealink phones’ RPS feature. We have investigated in these reports and found out that this problem was already solved in our V71 version of firmware.<BR>
<BR>
<B>Correction and Precaution Solutions for RPS Security Vulnerability Issues<BR>
</B> <BR>
Yealink V71 version firmware could completely guard the Yealink IP Phones from the security risks.<BR>
<BR>
How to operate:<BR>
1) To upgrade the Yealink IP Phones to V71 firmware; <BR>
2) To encrypt the configuration files with Yealink cfg encryption tool.<BR>
The Yealink cfg encryption tool could be downloaded per below link, <BR>
<FONT COLOR="#0000FF"><U><a href="http://www.yealink.com/Upload/T2X/T2X-V71/Yealink%20Configuration%20Encryption%20Tool.zip">http://www.yealink.com/Upload/T2X/T2X-V71/Yealink%20Configuration%20Encryption%20Tool.zip</a></U></FONT> <BR>
<BR>
Yealink take our customers’ security very seriously and are constantly working to improve the security features of our products. Yealink therefore also highly recommend our customers regularly update firmware to the latest version to benefit from our new features and facilities.<BR>
</SPAN></FONT></FONT><FONT FACE="Monaco, Courier New"><SPAN STYLE='font-size:11pt'><BR>
<BR>
----- Snip ------<BR>
<BR>
So if you are using Yealink and RPS encrypt those configs and upgrade to atleast the V71 firmware.<BR>
<BR>
<BR>
-- <BR>
Ken<BR>
<a href="http://www.FreeSWITCH.org">http://www.FreeSWITCH.org</a><BR>
<a href="http://www.ClueCon.com">http://www.ClueCon.com</a><BR>
<a href="http://www.OSTAG.org">http://www.OSTAG.org</a><BR>
G+ ClueCon : <a href="http://fs0.us/cluecon-gplus">http://fs0.us/cluecon-gplus</a><BR>
FB ClueCon : <a href="http://fs0.us/cluecon-fb">http://fs0.us/cluecon-fb</a><BR>
G+ FreeSwitch : <a href="http://fs0.us/freeswitch-gplus">http://fs0.us/freeswitch-gplus</a><BR>
FB FreeSWITCH : <a href="http://fs0.us/freeswitch-fb">http://fs0.us/freeswitch-fb</a> <BR>
Twitter : @FreeSWITCH_WIRE<BR>
irc.freenode.net #freeswitch<BR>
</SPAN></FONT>
</BODY>
</HTML>