A vulnerability in bash is affecting all kinds of *nix systems and some Cisco collaboration products are affected. Cisco has identified the vulnerable software and has either patched or is in the process of building patches.
The PSIRT is by far the best place to look for vulnerable software as well as to look at each BugID to find patched software
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash
Look under Affected Products | Vulnerable Products for the official list. Currently (10/13) is shows:
Voice and Unified Communications Devices
- Cisco Business Edition 3000 (BE3k) [CSCur08462]
- Cisco Emergency Responder [CSCur05434]
- Cisco Finesse [CSCur02866]
- Cisco Hosted Collaboration Mediation Fulfillment [CSCur05477]
- Cisco IM and Presence Service (CUPS) [CSCur05454]
- Cisco IP Interoperability and Collaboration System (IPICS) [CSCur05245]
- Cisco MediaSense [CSCur02875]
- Cisco Paging Server (Informacast) [CSCur04834]
- Cisco Paging Server [CSCur04834]
- Cisco SocialMiner [CSCur02880]
- Cisco Unified Communications Domain Manager [CSCur01180]
- Cisco Unified Communications Manager (CUCM) [CSCur00930]
- Cisco Unified Contact Center Express (UCCX) [CSCur02861]
- Cisco Unity Connection (UC) [CSCur05328]
Some of the high priority links I’ve been asked for: