topic Re: OpenSSH < 9.8 RCE in Network Security

OpenSSH < 9.8 RCE

Minato — Thu, 01 Aug 2024 03:54:41 GMT

OpenSSH < 9.8 RCE

Hello,

In my company we have run tenable scan and we have Vulnerability in Cisco Firepower 1150 Security Appliance ---- Product IDFPR1150-ASA-K9 -- (OpenSSH < 9.8 RCE))

Can you help to fix this issue ? Can any one help in this issue.

Re: OpenSSH < 9.8 RCE

Mark Elsen — Thu, 01 Aug 2024 07:29:29 GMT

- For Cisco products upgrade to latest (advisory) software version , if applicable , and check again.
If the vulnerability remains and it is considered important for business then contact TAC ,

Re: OpenSSH < 9.8 RCE

Minato — Fri, 02 Aug 2024 11:29:09 GMT

Is anyway to update only openssh in firewall ? and can you share the command how to check shh version.

Re: OpenSSH < 9.8 RCE

Mark Elsen — Fri, 02 Aug 2024 12:08:37 GMT

>....Is anyway to update only openssh in firewall ?
That is not possible

>... the command how to check shh version
You could try externally with nmap as in : % nmap -sV -p22 ip-address-of-firewall