PHP Vulnerabilities

PHP Vulnerabilities: Patches Now Available

Dear Customers, 

Patches addressing the reported vulnerabilities are now ready and available upon request for the following models:

HD492

HD1492

AV610

DE551

DE561

EN537 (serial numbers 2000 and up)

Support Subscription Requirement:

These patches are available to customers with an active AI-Media Support subscription or agreement covering the affected equipment. Our Support team will verify subscription eligibility before providing the appropriate patches.

If your equipment is not currently covered by an active support subscription, please contact your AI-Media Account Manager to discuss renewal or available support options.

How to Request Patches:

To request the patches, please email our support team at eeg.support@ai-media.tv and include the following information for each unit requiring patches:

Hardware Model:

Serial Number:

Software Version the unit is on:

Please ensure that the information is provided for every potentially affected unit so our support team can identify the appropriate patches for your hardware.

If you are unsure if your unit(s) were affected by the vulnerabilities, please reach out to our Support team at the address above mentioned to confirm.

Thank you for your cooperation.

Dear valued customers,

We are aware of the recently reported PHP vulnerabilities and want to provide an update on our assessment and remediation efforts.

Our team immediately conducted an assessment of our products and determined that the vulnerabilities affect only our pre-UHD592 SDI hardware, as well as our legacy CaptionCast service. Our other products do not use PHP and are not affected.

To address the issue, our team has already prepared patches for nearly all active affected models. We are prioritizing testing and validation to ensure the patches can be deployed as quickly as possible while maintaining the reliability and performance you expect from our products.

We take the security of our products and our customers' systems seriously and are committed to resolving this issue promptly. We will provide further updates as testing progresses and deployment plans are finalized.

A gentle reminder to avoid putting your AI Media appliances on public IP addresses, to limit access to users on your LAN. Traffic between your appliances and our LEXI cloud is initiated via outbound traffic and does not require the devices be reachable from the Internet.

Thank you for your continued trust in our team. If you have any questions or concerns, please contact our team at eeg.support@ai-media.tv