UCF STIG Viewer Logo

The network element must not use SSH Version 1 for administrative access.


Overview

Finding ID Version Rule ID IA Controls Severity
V-14717 NET1647 SV-15460r2_rule Medium
Description
SSH Version 1 is a protocol that has never been defined in a standard. Since SSH-1 has inherent design flaws which make it vulnerable to, e.g., man-in-the-middle attacks, it is now generally considered obsolete and should be avoided by explicitly disabling fallback to SSH-1.
STIG Date
Infrastructure L3 Switch Secure Technical Implementation Guide - Cisco 2018-11-27

Details

Check Text ( C-12925r2_chk )
If SSH is used for administrative access, then Version 2 must be configured as shown in the following example:

ip ssh version 2
Fix Text (F-14184r5_fix)
Configure the network device to use SSH version 2.