who is know the SSH Version of the lately VCS sw version (Video Communications Server) ?

[jinhyuk lee]

our customer wants know the SSH version of VCS.. 

because the openssh version has a weakness of security on their VCS (VCS version is 5.9)

Who is know the SSH Version of lately VCS ?

[Patrick Sparkman]

I don't know the version of SSH being used in the current release of VCS X8.9.x software.  Since VCS X5.9 software is very old, 2010-2011 and as you've pointed out contains security vulnerabilities, I recommend you upgrade your VCS to the most recent software that is supported for your platform, as Cisco consistently checks for vulnerabilities and releases software updates to mitigate them.  Take a look at the VCS Release Notes to see what it will take to upgrade your VCS.

[jinhyuk lee]

thanks for your reply

[paul.ghattas · Accepted solution]

If you have root access to VCS run command sshd -v.  I just checked VCS running x8.9.1 its running OpenSSH_7.3p1

[Wayne DeNardi]

I don't recall there ever being a version "5.9" release - so you may want to check the version you are looking for - but saying that, there is no way to manually update the SSH version of a VCS, so you'll have to go with one of the provided versions.

There are many other security advisories for the Cisco VCS platform, not just SSH vulnerabilities.  I suggest you have a look through those.

It's always recommended that if you want to keep on top of any of the more recent vulnerabilities, that you update to the latest software release (which as of the date of writing this, is X8.9.2).

Wayne
--
Please remember to rate responses and to mark your question as answered if appropriate.

[jinhyuk lee]

thanks for your advise