Issue:
Multicam SSL patch (TLSv1.2) does not pass PCI scan
Patch / Procedure:
1. Please download patch here: http://ftp.geovision.tw/FTP/Stephen/UVS ... 1.0.2e.zip
2. Please close/exit Multicam
3. Unzip the patch file
4. Copy and replace the files (ssleay32.dll, SSL.dll, libeay32.dll) to Multicam install path (For example: C:\GV-NVR )
Note:
1. This patch is custom made for DTT USA, it is NOT recommended to provide this patch to other customers.
2. We can't guarantee using OpenSSL 1.0.2e will pass Security Metrics tests because the vulnerability Security Metrics presents Multicam failed does not affect all versions of OpenSSL v1.0.2 at all.
Reference:
RE: [ UVS - 201512315002 ] Multicam SSL patch (TLSv1.2) does not pass PCI scan, Control Scan / Trustwave / Security Matrix