New BASH ShellShock Security Bug - bigger than Heartbleed!

Question

Woke up this morning to this: http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/
A bug discovered in the widely used Bash command interpreter poses a critical security risk to Unix and Linux systems.
You can check if you're vulnerable by running the following lines in your default shell, which on many systems will be Bash. If you see the words "busted", then you're at risk. If not, then either your Bash is fixed or your shell is using another interpreter.
env X="() { :;} ; echo busted" /bin/sh -c "echo completed"
env X="() { :;} ; echo busted" `which bash` -c "echo completed"
Scanned systems internally and found the following were affected:
Cisco VCS devices (x7 and x8)
Cisco MXE 3500
Cisco DMM and SNS (assuming since running Red Hat Enterprise but unable to verify)
Jabber Guest
TCS Endpoints (6 or below have been verified, unable to verify 7 but assume vulnerable)
Cisco Conductor
Cisco has also just posted a security advisory:
http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=4689&signatureSubId=0&softwareVersion=6.0&releaseVersion=S824

Answer 1

Yup. MXP based Codecs are vulnerable.
Video, Streaming, TelePresence, and Transcoding Devices
Cisco DCM Series 9900-Digital Content Manager [CSCur02624]
Cisco Edge 300 Digital Media Player [CSCur02761]
Cisco Edge 340 Digital Media Player [CSCur02751]
Cisco Show and Share [CSCur03539]
Cisco TelePresence Conductor [CSCur02103]
Cisco TelePresence Content Server (TCS) [CSCur05150]
Cisco TelePresence IP Gateway Series [CSCur04984]
Cisco TelePresence IP VCR Series [CSCur04993]
Cisco TelePresence ISDN GW 3241 [CSCur05010]
Cisco TelePresence ISDN GW MSE 8321 [CSCur05010]
Cisco TelePresence ISDN Link [CSCur05025]
Cisco TelePresence MCU (8510, 8420, 4200, 4500 and 5300) [CSCur05050]
Cisco TelePresence MXP Software [CSCur05095]
Cisco TelePresence Management Suite Extension for IBM [CSCur05217]
Cisco TelePresence Manager (CTSMan) [CSCur05104]
Cisco TelePresence Recording Server (CTRS) [CSCur05038]
Cisco TelePresence Serial Gateway Series [CSCur05110]
Cisco TelePresence Server 8710, 7010 [CSCur05172]
Cisco TelePresence Server on Multiparty Media 310, 320 [CSCur05172]
Cisco TelePresence Server on Virtual Machine [CSCur05172]
Cisco TelePresence Supervisor MSE 8050 [CSCur05073]
Cisco TelePresence TE Software (for E20 - EoL) [CSCur05162]
Cisco TelePresence Video Communication Server (VCS/Expressway) [CSCur01461]
Cisco TelePresence endpoints (C series, EX series, MX series, MXG2 series, SX series) and the 10" touch panel [CSCur02591]
Cisco Video Distribution Suite for Internet Streaming VDS-IS [CSCur05320]
Tandberg Codian ISDN GW 3210/3220/3240 [CSCur05010]
Tandberg Codian MSE 8320 model [CSCur05010]