SSH Weak Key Exchange Algorithms Enabled

[rakeshshelar8378]

Hi Guys,

I have a Cisco SF300 switch. We have done VAPT and found that vulnerability "SSH Weak Key Exchange Algorithms Enabled". I need to disable this. Please suggest how to resolve this issue. How i can login to switch via ssh more securley?

Regards,

Rakesh

[marce1000]

         - Use latest firmware for the device , (if not yet done)  , check if that can help.

 M.

[rakeshshelar8378]

The current running Firmware version is 1.4.11.5 and it is the latest firmware.

[balaji.bandi]

check some Vulnerable and guide lines :

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbms

[rakeshshelar8378]

As per the shared link, there is no workaround that addresses this vulnerability.

[rakeshshelar8378]

Is there any alternate way to access the switch via SSH more securely? Is there any more option in ssh authentication?

[rakeshshelar8378]

Hi,

I got this document on the internet, public key authentication for ssh on cisco switches.

https://helpdeskgeek.com/how-to/enable-public-key-authentication-ssh-cisco-sg300-switches/