We have several SG300 switches that when we run an internal vulnerability scan detects multiple issues with the Open SSH on the switch. It detects it as 3.6.1p1. These vulnerabilities include, but not limited to, CVE ID's CVE-2003-0693, CVE-2003-0386, and CVE-2003-0190. We are running the latest code and have SSH V2 enabled. Has anyone else run into this, and if so, are these false positives or what did you do to get around it?
