OpenSSH < 9.6 Multiple Vulnerabilities in CISCO C9500-16X-A

[Rajasekarsarva]

We received vulnerability mail from my security team. Could you anyone have solution for this vulnerability 

CVE-2023-51384 , CVE-2023-48795 , CVE-2023-51385

[balaji.bandi]

Cisco alread have bug reported :

https://bst.cisco.com/bugsearch/bug/CSCwi61867?rfs=qvlogin

by the way what version of IOS XE code running ?  and check the bug suggestions.

[Rajasekarsarva]

My devices working mentioned version

Cisco IOS XE Software, Version 17.03.05
Cisco IOS Software [Amsterdam], Catalyst L3 Switch Software (CAT9K_IOSXE), Versi on 17.3.5, RELEASE SOFTWARE (fc2)

[jsusmc]

step by step siolution anyone ?

[balaji.bandi]

step by step siolution anyone ?

what device model and what IOS code ?

[jsusmc]

UCSC-C240-M4SX

C240M4.4.1.2c.0.0202211902

[balaji.bandi]

check what CVE is effected for you :

https://sec.cloudapps.cisco.com/security/center/cvr

[Rajasekarsarva]

Model: Cisco 9500

Version : Cisco IOS XE Software, Version 17.03.05

[Rajasekarsarva]

Device Upgrade is a solution ?

My device Cisco9500