CSL Dualcom Gemini Cisco VPN endpoint vulnerable to POODLE attack

CSL Dualcom use Cisco VPN software to connect to their management platform, Gemini.

The server that does this is listed as https://cslvpn.cslconnect.com/

On inspection with SSLLabs test, there are configuration issues with the TLS on this server, giving it a grade F.

This includes vulnerability to the POODLE attack.

Note that, as per the SSLLabs test, this is not the only issue.

Update

As of 14/11/2015, the POODLE vulnerability has been closed. Again, you need to ask why this wasn’t picked up.