https://community.cisco.com/t5/network-security/cbs350-openssh-vulernability/m-p/5036813#M1109749 <P>&nbsp;</P> <P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <EM>&nbsp; <STRONG>&nbsp; &nbsp;- &gt;...</STRONG></EM><SPAN><STRONG><EM>&nbsp;Is this just a false positive&nbsp;</EM></STRONG><BR /></SPAN>&nbsp; - You could for instance test that with :&nbsp;<A href="https://github.com/kali-mx/CVE-2023-38408" target="_blank">https://github.com/kali-mx/CVE-2023-38408</A><BR />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<A href="https://github.com/LucasPDiniz/CVE-2023-38408" target="_blank">https://github.com/LucasPDiniz/CVE-2023-38408</A>&nbsp; (e.g!)</P> <P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<STRONG>&nbsp; &gt;.<EM>..&nbsp;or will this be addressed in future firmware updates?&nbsp;</EM></STRONG><BR />&nbsp; - Best is to report (and query) to Cisco :&nbsp;<A href="https://www.cisco.com/c/en/us/support/web/tsd-cisco-small-business-support-center-contacts.html" target="_blank">https://www.cisco.com/c/en/us/support/web/tsd-cisco-small-business-support-center-contacts.html</A></P> <P>&nbsp;M.</P> <P>&nbsp; &nbsp;&nbsp;<BR />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<BR />&nbsp; &nbsp;</P> Sat, 09 Mar 2024 07:04:52 GMT Mark Elsen 2024-03-09T07:04:52Z https://community.cisco.com/t5/network-security/cbs350-openssh-vulernability/m-p/5036699#M1109745 <P><FONT face="arial,helvetica,sans-serif">A network scanner of ours is detecting our CBS350s running&nbsp;Version: 3.4.0.17 vulnerable to&nbsp;<SPAN>CVE-2023-38408 where it detected&nbsp;SSH-2.0-OpenSSH_7.3p1.RL via SSH. Is this just a false positive or will this be addressed in future firmware updates? I am on the latest firmware that is available.</SPAN></FONT></P> Fri, 08 Mar 2024 19:03:07 GMT https://community.cisco.com/t5/network-security/cbs350-openssh-vulernability/m-p/5036699#M1109745 ryan14 2024-03-08T19:03:07Z https://community.cisco.com/t5/network-security/cbs350-openssh-vulernability/m-p/5036813#M1109749 <P>&nbsp;</P> <P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <EM>&nbsp; <STRONG>&nbsp; &nbsp;- &gt;...</STRONG></EM><SPAN><STRONG><EM>&nbsp;Is this just a false positive&nbsp;</EM></STRONG><BR /></SPAN>&nbsp; - You could for instance test that with :&nbsp;<A href="https://github.com/kali-mx/CVE-2023-38408" target="_blank">https://github.com/kali-mx/CVE-2023-38408</A><BR />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<A href="https://github.com/LucasPDiniz/CVE-2023-38408" target="_blank">https://github.com/LucasPDiniz/CVE-2023-38408</A>&nbsp; (e.g!)</P> <P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<STRONG>&nbsp; &gt;.<EM>..&nbsp;or will this be addressed in future firmware updates?&nbsp;</EM></STRONG><BR />&nbsp; - Best is to report (and query) to Cisco :&nbsp;<A href="https://www.cisco.com/c/en/us/support/web/tsd-cisco-small-business-support-center-contacts.html" target="_blank">https://www.cisco.com/c/en/us/support/web/tsd-cisco-small-business-support-center-contacts.html</A></P> <P>&nbsp;M.</P> <P>&nbsp; &nbsp;&nbsp;<BR />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<BR />&nbsp; &nbsp;</P> Sat, 09 Mar 2024 07:04:52 GMT https://community.cisco.com/t5/network-security/cbs350-openssh-vulernability/m-p/5036813#M1109749 Mark Elsen 2024-03-09T07:04:52Z