SSH Server Public Key Too Small Vulnerability on DNAC

[sujanyakj]

Any suggestion on fixing the above VA in DNAC or how to check the existing SSH public key length in DNAC 

 

[Torbjørn]

The following command should output the DNAC SSH server public key length:

ssh-keyscan -t rsa -p 2222 {your dnac ip} | ssh-keygen -lf -

I don't believe there is any feasible(or supported) way to replace this.

EDIT: You should either run this in privileged shell(execute "_shell" on DNAC > 2.3.5.X), or on a linux/BSD/MacOS machine that can reach your DNAC.

[sujanyakj]

Okay is this command is depends on the DNAC version , we are running DNAC with 2.3.3.7 

[Torbjørn]

Sorry @sujanyakj, I forgot to specify how you should run the commands. Please see my updated reply above.