Indeni’s response to the critical OpenSSL vulnerability

Notice: This blog post was originally published on Indeni before its acquisition by BlueCat.

The content reflects the expertise and perspectives of the Indeni team at the time of writing. While some references may be outdated, the insights remain valuable. For the latest updates and solutions, explore the rest of our blog

OpenSSL is one of the most widely used open-source libraries worldwide. On October 26th, the OpenSSL Project team announced a new critical vulnerability in versions 3.0 and above. It is likely to affect common configurations and be exploitable. 

Although OpenSSL v3 is the newer version, it is still significantly less prevalent than OpenSSL v1, which is not impacted by this vulnerability. The Indeni product is running the maintained Long Term Support version (the 1.1.1 series). This version is supported until September 11, 2023. 

Thankfully, that’s one less server you need to patch. If you have additional questions related to the OpenSSL vulnerability, please do not hesitate to contact us. 

Key Takeaways
  • The announced OpenSSL vulnerability affects versions 3.0 and above and is classified as critical and likely exploitable in common configurations.
  • OpenSSL version 1.x, including the 1.1.1 Long Term Support series, is not impacted by this specific vulnerability.
  • OpenSSL 3.x adoption remains lower than OpenSSL 1.x, which limits the overall exposure but still poses risk where 3.x is deployed.
  • The Indeni product uses OpenSSL 1.1.1 LTS, which is not affected by the new vulnerability and remains supported until September 11, 2023.
  • Systems running OpenSSL 3.x should be prioritized for patching and remediation, while those on 1.1.1 do not require changes for this issue.

An avatar of the author

Ulrica de Fort-Menares is the Vice President of Product Management for Infrastructure Assurance.

Related content

Three armored figures walking toward a futuristic Las Vegas skyline with pyramids, glowing orb, and "Welcome to Fabulous Las

Your journey to intelligent NetOps begins at Cisco Live

Visit BlueCat’s booth or book a meeting now to learn more about how our solutions can help you build a network that supports constant change.

Read more
Stacked colorful wooden directional arrows on a post by a calm seaside with distant hills and blue sky

Replace BIND and ISC with Micetro DNS/DHCP Server (MDDS)

Tired of patching and manually configuring BIND DNS and ISC DHCP? Discover how Micetro MDDS appliances can replace them for modern DDI.

Read more
Row of orange industrial robotic arms positioned along an automated conveyor belt in a factory setting

Automate it all in Integrity with REST v2 API-first DDI management

Discover API-first DDI with Integrity X by using REST v2 to automate DNS, DHCP, and IPAM for scalable, secure network operations.

Read more
Three colleagues at monitors collaborating, overlaid with network, analytics, cloud, and gear icons.

Agentic AI adoption in network observability propels NetOps teams

Network observability is crucial for today’s networks and even more capable with agentic AI, according to new Omdia and BlueCat research.

Read more

⏳ Cisco Live is almost here. Put BlueCat on your agenda for smarter, more secure networks.