Filter Out Timestamp Requests

[aschnur]

Do anyone know whether we are able to filter out the ICMP timestamp requests , and the outgoing ICMP timestamp replies from the Poly x series codecs? On the x72 specifically I am seeing it return CVE-1999-0524 when I scan it for vulnerabilities.

Thanks!

[SteffenBaierUK]

Hello @aschnur ,

Welcome to the HP community.

Unfortunately, your post does not contain the currently used Software version for the HP Poly product, the HP Poly Software, or the Partner application version you use. For example Microsoft Teams, Zoom Rooms, Poly SIP/H.323 mode etc.

This is important especially in the future when someone finds this post in days, months, or years to come.

Please do not simply edit the original post but reply with the versions.

In the FAQ or the Read 1st section, we remind users why this is important.

To your actual issue, CVE-1999-0524 ICMP Timestamp Request Remote Date Disclosure is classed only a 2.1 here: https://nvd.nist.gov/vuln/detail/CVE-1999-0524, so from my experience, this is not a critical issue.

You may configure the local firewall to prevent a system from responding to certain ICMP requests.

Best regards

Steffen Baier

[aschnur]

I am seeing this same CVE on the x52 and x72. Both devices are set up for Zoom, the x52 is on 4.3.3-428018, and the x72 is on 4.2.5-398123. Thoughts?

[SteffenBaierUK]

Hello @aschnur 

only the same answer that I already provided.

Best regards

Steffen Baier