About Network713

Network713 · 07-07-2023

I have WLC5520 8.10.185.0 (latest version), scan shows that it is uing insecure TLS 1.2 Ciphers CBC & SHA. Vulnerabilities:TLS_RSA_WITH_AES_256_CBC_SHATLS_RSA_WITH_CAMELLIA_256_CBC_SHATLS_RSA_WITH_AES_128_CBC_SHATLS_RSA_WITH_CAMELLIA_128_CBC_SHA=====...

Network713 · 07-24-2023

Yes, I used the GUI to config cipher high all along.I upgraded to 8.10.185 and it still shows the same vulnerabilities.

Network713 · 07-11-2023

I upgraded to the latest IOS and it is the same result. WLC still shows that it is using vulnerable CBC & SHA1 ciphers.(Cisco Controller) > show run-configSystem InventoryNAME: "Chassis" , DESCR: "Cisco 5520 Wireless Controller"PID: AIR-CT5520-K9, V...

Network713 · 11-16-2022

Issue: SSH Server Supports Weak Key Exchange Algorithms:22Fix cli - ip ssh server algorithm kex ecdh-sha2-nistp521Make sure you can open another ssh session into your device after you put the command in, so you don't lock yourself out. Reccomend to d...

Network713 · 11-16-2022

Make sure you can open another ssh session into your device after you put the command in so you don't lock yourself out.ip ssh serv alg kex diffie-hellman-group14-sha1Reccomend to do this also:ip ssh time-out 15ip ssh authentication-retries 2ip ssh v...

Network713 · 11-02-2022

I fixed my issue!Issue: SSH Server Supports Weak Key Exchange Algorithms:22Fix cli - ip ssh serv alg kex diffie-hellman-group14-sha1Make sure you can open another ssh session into your device after you put the command in, so you don't lock yourself o...

Member Since	‎09-29-2017 02:27 PM
Date Last Visited	‎10-02-2024 07:31 AM
Posts	14
Total Helpful Votes Received	16

User Statistics

User Activity

WLC5520 8.10.185 - TLS1.2 Using Insecure Ciphers, CBC & SHA

Re: WLC5520 8.10.185.0 - CBC SHA Vulnerabilities

Re: WLC5520 8.10.151.0 - CBC SHA Vulnerabilities

Re: How to disable SSH weak key exchange algorithm

Re: SSH vulnerability

Re: Disabling SSH weak key exchange algorithms in IOS