ACI Open SSH vulnerabilities

[Ma'moun Mohammad shanableh]

Hello,

I have the following vulnerabilities that can be shown on the APIC:

38902,OpenSSH Man-in-the-Middle (MITM) Attack Vulnerability
38901,OpenSSH Command Injection Vulnerability
38868,OpenSSH Privilege Escalation Vulnerability
38773,OpenSSH Integer overflow Vulnerability
38903,OpenSSH Probable User Enumeration Vulnerability
38900,OpenSSH Public-Key Authentication Vulnerability

[mfr-6]

HI @Ma'moun Mohammad shanableh 

I'd suggest you to open a case in a TAC so they can support you on this and provide you a help. There is a chance the latest software version have this already covered and those vulnerabilities are patched. Upgrading your ACI fabric to the latest recommended version will be the first step for you.