OpenSSL vulnerability

[DuttaS]

We are running NX OS v6.2(13). is there a possibility this OpenSSL bug affects this code? How do I know what openSSL version we have on our CISCO 9000 SANs?

[ammahend]

can you share the bug ID or CVE ID you are talking about

[DuttaS]

CVE-2024-6387

[ammahend]

It’s still under investigation, you can use this link to keep track

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssh-rce-2024

[ahmedshoaib]

Dear;

We need to wait from Cisco to update regarding the Cisco security advisory regarding OpenSSH (CVE-2024-6387). Currently Cisco is doing investigation on mostly of the product whether they are vulnerable or not. Cisco already highlighted some product those are Vulnerable, which not include Nexus OS & Cisco 9000 SAN.

Need to wait from Cisco to identify & release the fix of Vulnerable devices.

Thanks