iDRAC access by ssh is vulnerable to cve-2023-48795 terrapin

Products

• Security Analytics

Issue/Introduction

The iDRAC for the r640 may be vulnerable to the ssh cve-2023-48795.  ssh can be disabled.

Environment

iDRAC 2.18.1

Resolution

ssh can be disable in the iDRAC. Log in to the iDRAC interface and search for ssh in the top right corner search box. The result will take you directly to the Services -> SSH menu to Enable or Disable ssh.