Last week, a group of researchers published details about a major security flaw, known as Meltdown and Spectre, which affects some Intel and AMD processors, or some processors using ARM cores. Attacks that exploit this bug could allow malicious software to spy deeply into other processes and data on the target computer or smartphone.
Aware of the relevance of the matter, Media5 Corporation has evaluated Meltdown and Spectre vulnerabilities and has determined that Mediatrix gateways, ATAs, and Sentinel are NOT vulnerable.
Impact to Mediatrix customers
Mediatrix platforms do not allow execution of a third party software, therefore they do not run arbitrary code and have no exploitable shell, being therefore non-vulnerable to Meltdown and Spectre.
The Sentinel 400 allows a Virtual Machine (VM) to be installed through a licence mechanism. Customers making use of a VM licence must make sure the operating system they install on the virtual machine is safe and that the VM itself is protected from any form of malicious attacks.
Impacts for M5T and Media5-fone customers
Other Media5 products that do not allow running non-embedded third party code are also not at risk, i.e.:
- M5T Sip Client Engine Software Development Kits
- Media5-fone SoftClients
While the list of third-party embedded libraries required by the M5T Sip Client Engine SDKs is provided to customers along with the software archive, the list of embedded third-party libraries for the Media5-fone SoftClients can be accessed here.
As a general rule, to minimize the potential impact of these vulnerabilities, Media5 recommends Media5-fone customers to take the following action:
- Install all Windows, Linux, Android, iOS, and Mac OS patches available with the latest updates from appropriate vendors.
Intel website – Issues update
Arm website – Security update
Mitre website – Spectre – CVE-2017-5715
Mitre website – Spectre – CVE-2017-5753
Mitre website – Meltdown – CVE-2017-5754
With over 5 billion subscribers, mobiles now connect more than two-thirds of the world’s population. The debate across the mobile disruptive innovations brings together the world-class leaders to Barcelona, Spain, from February 26th to March 1st, for the Mobile World Congress 2018 edition.
As a global leader supplier of communication solutions, Media5 will be present at MWC 2018 reaffirming its commitment to share innovative trends for real-time communications focus on developed and developing markets.
The company brings to the conference and technology exhibition its complete portfolio of real-time solutions for operators, providers, and integrators for better business communications and improved productivity.
Among the solutions Media5 will showcase in Barcelona, there will be the Mediatrix enhanced VoIP gateways, officially certified as interoperable with Skype for Business. Mediatrix products are suitable for hybrid or pure IP networks, on-premise or hosted Skype for Business. Skype for Business is a high-powered communication platform ensuring mobility, teamwork, and customer engagement for enterprises seeking for more productivity and better outcomes.
During the four-day event, more than 100,000 mobile professionals will network, showcase, and exchange ideas. You cannot afford to miss it! Schedule your meeting with Media5 at MWC 2018 now: email@example.com
Media5 Corporation will join the telecom global leaders and industry’s pioneers at CES 2018, from 9 to 12 January, in Las Vegas/U.S. Over the pass decades, the conference and tradeshow attracts those who thrive on the business of consumer technologies. The conference is globally known as a prominent space for innovative solutions and breakthrough technologies — a major meeting point where next-generation innovations are introduced to the marketplace.
As the Canadian leader provider of communications solutions, Media5 portfolio includes comprehensive software and hardware components deployed in more than a hundred countries worldwide.
Do not miss the chance to get in touch with our expert team present at the CES 2018. Schedule your meeting now: firstname.lastname@example.org.