CVE-2017-5754, CVE-2017-5715, CVE-2017-5753 - Meltdown and Spectre CPU Vulnerabilities - Opengear Console Servers are not affected

Updated as of 4/14/2018

Opengear Lighthouse 4/5 VM

Opengear Lighthouse 4 and 5 VM are affected by Spectre and Meltdown (if the VM is run on an Intel host) but are not practically exploitable. The available scripting languages do not give enough timing or cycle accuracy to trigger the exploits found in Spectre or Meltdown. As a preventative measure, users can disable shell accounts for non-administrator users.

Opengear Devices

All Opengear Console Servers are not affected by the Spectre or Meltdown Vulnerability.    Please note in a previous announcement Opengear did indicate the ACM7000 and CM7100 series were affected.  In a recent announcement from our CPU manufacturer these products are not vulnerable to the exploits.

Product Family	CPU	Status
Lighthouse 4 Hardware Appliance (Dell Server)	Intel	Affected
CM7100 Console Manager	Marvell 88F6W11	Unaffected
ACM7000 Remote Site Gateway	Marvell 88F6W11	Unaffected
ACM7000-L Resilience Gateway	Marvell 88F6W11	Unaffected
IM7200 Infrastructure Manager	Marvell 88F6283	Unaffected
IM4200 Infrastructure Manager	Micrel KS8695P	Unaffected
CM4100 Console Manager	Micrel KS8695P	Unaffected
ACM5500 Remote Infrastructure Management	Micrel KSZ8692	Unaffected
ACM5000 Remote Site Managers	Micrel KSZ8692	Unaffected