Nexus 7000 v6.2(10) - OpenSSH MaxAuthTries Limit Bypass Vulnerability

[alex.sykes1]

Hi All,

We are running Nexus 7000's - v6.2(10) - and a Nessus scan is reporting this vulnerability:

OpenSSH MaxAuthTries Limit Bypass Vulnerability

The solution says to upgrade to OpenSSH 7.0 or later.

Do you know how I would do this?  Is an OS upgrade required or is there anything else I can do?

Many thanks in advance.

Kind regards

Alex

[Seb Rupik · Accepted solution]

Hi Alex,

You would need to install new NX-OS software.

Incidentally if you need to check the current version of openSSH just telnet to port 22 .

With the ASA, Cisco publish opensource licence info:

http://www.cisco.com/c/en/us/support/security/asa-5500-series-next-generation-firewalls/products-licensing-information-listing.html

...sadly with the Nexus, this information is lacking and not very up to date:

http://www.cisco.com/c/en/us/support/switches/nexus-7000-series-switches/products-licensing-information-listing.html

cheers,

Seb.

[alex.sykes1]

Hi Seb,

Thank you so much for your quick response, it really is appreciated.

Thanks also for the tip to find out the openSSH version.  I've been looking for a good way to fund that out for a while.

Kind regards

Alex

[mohdtaamneh]

Hi All,

I have the same problem on nexus 9504 running latest 7.0(3)I1(3) and security scan showing the same vulnerability: openssh maxauthtries bypass.

I can see no license information available for 7.0(3)I1(3).

How to fix this  vulnerability?

Best Regards,

Mohammad Taamneh