I've found a nice post from a Cisco Support Engineer regarding to the ASA:

> However, if you are trying to find the OpenSSL version for an ASA (Adaptive Security Appliance), you can determine this version from the ASA release notes.  Simply examine the "Open Source" notes that are located in the release notes of the particular ASA image you are concerned with.  For example, from the ASA 8.4 release notes, you will find a section titled "Related Documentation", which has a link that points to "ASA Series Documentation".  From there, you will find a link for "Open Source License".  That will take you to an "Open Source" page which reveals that the OpenSSL version that runs on the ASA 8.4 code is "0.9.8f"

Due to this 8.4 as well as [9.1(x)](http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/license/open_source/open_source_lic_91.html#name4768142) are not vulnerable as they are using parts of the OpenSSL version 0.9.8f