OpenSSH < 9.8 RCE

[Minato]

OpenSSH < 9.8 RCE

Hello,

In my company we have run tenable scan and we have Vulnerability in Cisco Firepower 1150 Security Appliance ---- Product IDFPR1150-ASA-K9 -- (OpenSSH < 9.8 RCE))

Can you help to fix this issue ? Can any one help in this issue.

[Mark Elsen]

    - For Cisco products upgrade to latest (advisory) software version , if applicable , and check again.
       If the vulnerability remains and it is considered important for business then contact TAC , 

 M.

[Minato]

Is anyway to update only openssh in firewall ? and can you share the command how to check shh version.

[Mark Elsen]

       >....Is anyway to update only openssh in firewall ? 
      That is not possible

      >... the command how to check shh version
     You  could try externally with nmap as in : % nmap -sV -p22 ip-address-of-firewall

 M.