iDRAC access by ssh is vulnerable to cve-2023-48795 terrapin
search cancel

iDRAC access by ssh is vulnerable to cve-2023-48795 terrapin

book

Article ID: 278188

calendar_today

Updated On:

Products

Security Analytics

Issue/Introduction

The iDRAC for the r640 may be vulnerable to the ssh cve-2023-48795.  ssh can be disabled.

Environment

iDRAC 2.18.1

Resolution

ssh can be disable in the iDRAC. Log in to the iDRAC interface and search for ssh in the top right corner search box. The result will take you directly to the Services -> SSH menu to Enable or Disable ssh.