Vulnerabilities from WLC - AIR-CT5508-K9

[rodrigofreitas]

Hello, Guys

The follow vulnerabilities were found in my WLC - AIR-CT5508-K9:

Somebody knows these errors.

Port: 22/tcp     Running vulnerable SSH service: OpenSSH 4.0.

Port: 22/tcp     Running vulnerable SSH service. Vulnerable OS: Linux 2.6.15 - 2.6.27.

Port: 443/tcp     SSLv2 is supported

Port: 443/tcp     ip(xx.xx.xx.xx):443 negotiated the SSL_RSA_WITH_DES_CBC_SHA.

Port: 443/tcp     Running vulnerable HTTPS service.

Port: 443/tcp     TLS/SSL certificate is self-signed.

Can you help me?

Thanks,

Rodrigo

[Nicolas Darchis]

The first 2, there's nothing to do about it.

For support of SSLv2 and weak cipher encryption, there are commands for that.

config network secureweb cipher-option sslv2 {enable | disable}

The last one just requires you to install a signed certificate on the WLC management.