Cisco CIMC - FREAK ATTACK Vulnerability OPENSSL

[carbelae]

Hello,

I have a UCS C24 M3S with IMC version 1.5(1f). I received an alarm from a Vulnerability detection service saying that this server is vulnerable to FREAK attack: https://geekflare.com/test-freak-attack-cve-2015-0204-and-fix/

Apparently the solution is to disable EXPORT cipher suites. Is there any common solution to do this? or the issue is becouse the OLD CIMC version i may have. 

Thanks for the help

[Leo Laohoo]

---

@carbelae wrote:

Is there any common solution to do this? or the issue is becouse the OLD CIMC version i may have. 

---

Upgrade the firmware of the CIMC.