PHP Vulnerability Responses by Company

TDT AG

Global hosting
Aliases / services
TDT / TDT AG / tdt.de
Official website
https://tdt.de/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

TDT VA1000 and VA1100 telephone systems

Response status
Patches available; customer installation required
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The 22 October notice says PHP2Shell updates are available. Customers must install affected VA packages through the normal update mechanisms.

Scope: Patch availability does not establish installation on individual customer appliances.

What users should do

Update the affected packages and verify installation; contact TDT support if needed.

Official service URL

Source URLs

  1. TDT: PHP vulnerability responsehttps://tdt.de/de/news-stories/artikel/php2shell-sicherheitsluecke-updates-ab-sofort-verfuegbar/Response evidence

TDT FW2000 and FW5000 firewalls

Response status
Patches available; customer installation required
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

PHP2Shell updates for FW products are available and must be installed by customers using normal package-update mechanisms.

Scope: FW2000 and FW5000 only; availability is distinct from installation.

What users should do

Update the affected packages and verify installation.

Source URLs

  1. TDT: PHP vulnerability responsehttps://tdt.de/de/news-stories/artikel/php2shell-sicherheitsluecke-updates-ab-sofort-verfuegbar/Response evidence

TDT C.O.R.E. Checkmk monitoring component

Response status
Provider installation planned
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

TDT identifies the monitoring component as affected and says it will install the relevant packages for customers shortly; no completion time is given.

Scope: Planned installation for the Checkmk monitoring component, not confirmed completion everywhere.

What users should do

Ask TDT about scheduling and completion for your environment.

Source URLs

  1. TDT: PHP vulnerability responsehttps://tdt.de/de/news-stories/artikel/php2shell-sicherheitsluecke-updates-ab-sofort-verfuegbar/Response evidence

APOS-firmware routers and gateways

Response status
Reported not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

TDT explicitly excludes this product/service family from PHP2Shell impact.

Scope: Only APOS-firmware routers and gateways; separate from affected VA, FW and C.O.R.E. products.

What users should do

Confirm your product and firmware and continue normal maintenance.

Source URLs

  1. TDT: PHP vulnerability responsehttps://tdt.de/de/news-stories/artikel/php2shell-sicherheitsluecke-updates-ab-sofort-verfuegbar/Response evidence

SmartConnect Services

Response status
Reported not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

TDT explicitly excludes this product/service family from PHP2Shell impact.

Scope: Only SmartConnect Services; separate from affected VA, FW and C.O.R.E. products.

What users should do

Confirm your product and firmware and continue normal maintenance.

Source URLs

  1. TDT: PHP vulnerability responsehttps://tdt.de/de/news-stories/artikel/php2shell-sicherheitsluecke-updates-ab-sofort-verfuegbar/Response evidence
Related official sources
  1. TDT: PHP vulnerability responseOfficial notice
  2. TDT: Operator informationOfficial information directory

Comments