Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-14717 | NET1647 | SV-15460r2_rule | Medium |
Description |
---|
SSH Version 1 is a protocol that has never been defined in a standard. Since SSH-1 has inherent design flaws which make it vulnerable to, e.g., man-in-the-middle attacks, it is now generally considered obsolete and should be avoided by explicitly disabling fallback to SSH-1. |
STIG | Date |
---|---|
Perimeter Router Security Technical Implementation Guide Cisco | 2018-08-23 |
Check Text ( C-12925r2_chk ) |
---|
If SSH is used for administrative access, then Version 2 must be configured as shown in the following example: ip ssh version 2 |
Fix Text (F-14184r5_fix) |
---|
Configure the network device to use SSH version 2. |