CIMC SSH/Dropbear Server Vulnerabilities CVE-2016-7406 - 7409

[scottrobertson2ctr]

Hello,

I can see  there is not a patch for these Dropbear SSH server vulnerabilities as of yet. Does anyone have an idea when we can expect a patch ?

Thank you

Scott Robertson 

[wmchan1979]

Hi all,

I could not locate any official Security Advisories and Alerts describing the following four CVEs.

CVE-2016-7406
CVE-2016-7407
CVE-2016-7408
CVE-2016-7409

I only managed to locate the following platform-specific DDTS (UCS and Nexus 1000v for VMware).

CSCvb62003 - CIMC SSH/Dropbear Server Vulnerabilities CVE-2016-7406 - 7409 (Cisco Unified Computing System)
CSCvb56092 - Multiple Nexus 1010 dropbear SSH vulnerabilities (Cisco Nexus 1000V Switch for VMware vSphere)
CSCvc24266 - UCS-E CIMC Dropbear SSH vulnerability - 2016 (Cisco UCS E-Series Software)
CSCvb94592 - CIMC SSH/Dropbear Server Vulnerabilities CVE-2016-7406 - 7409 (Cisco Unified Computing System)
CSCvb56137 - CIMC SSH/Dropbear Server Vulnerabilities CVE-2016-7406 - 7409 (Cisco Unified Computing System)

Anyone knows if other platform is affected by these Dropbear SSH vulnerabilities?