OpenSSH < 8.0 vulenrability

[TsadikuBahiru78025]

We have a cisco firewall of asa5525x we have the vulnerability of OpenSSH < 8.0. Please assist us to remediate this.

[Marvin Rhoads]

I presume this is based on a system scan. Please share the CVE reference for the vulnerability you are seeing.

[TsadikuBahiru78025]

Hello Marvin yes it is based on a system scan for compliance purpose and they just gave it a medium risk with CVSS Score=4.0-6.9

[Marvin Rhoads]

CVSS is the severity score. I was asking for the CVE = the actual Common Vulnerability and Exposure ID.

[TsadikuBahiru78025]

Ok, sorry, these are the CVEs

(CVE-2018-20685)
(CVE-2019-6109, CVE-2019-6110)
(CVE-2019-6111)

[Marvin Rhoads]

I see a couple of unresolved bugs that could lead to this finding:

• https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt95636
• https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt95637
• https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt95638
• https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt95640

Do you have the scp server enabled on your ASA ("ssh scopy enable")?

[TsadikuBahiru78025]

We are just managing it through fmc still now. I don't think it is enabled.

[TsadikuBahiru78025]

Ok, so we don't have solution currently.