cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
11695
Views
0
Helpful
1
Replies

How to fix this vulnerability? "SSH Server CBC Mode Ciphers Enabled" on a cisco switch.

OMAR CANDARAVE
Level 1
Level 1


Hi experts,

I just received a document with this vulnerability: "SSH Server CBC Mode Ciphers Enabled" for many cisco switches.

the description says:

"The SSH server is configured to support Cipher Block Chaining (CBC) encryption. This may allow an attacker to recover the plaintext message from the ciphertext. Note that this plugin only checks for the options of the SSH server and does not check for vulnerable software versions"

and the solution says:

"Contact the vendor or consult product documentation to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption."

How can I fix that?

Please let me know if you need some information.

1 Reply 1

Tagir Temirgaliyev
Spotlight
Spotlight

https://supportforums.cisco.com/discussion/12406081/disabling-ssh-cbc-cipher-cisco-routersswitches

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: