iDRAC access by SSH is vulnerable to CVE-2023-48795 terrapin

Products

• Security Analytics

Issue/Introduction

The iDRAC for the r640 may be vulnerable to the SSH CVE-2023-48795 depending on which firmware version is installed.  The vulnerability can be mitigated.

Environment

iDRAC 7.x

Resolution

Upgrade to iDRAC version 7.00.00.171 or later.  Version 7.00.00.171 can be downloaded from Dell's website HERE.  NOTE:  make sure you download the .EXE version of the firmware.  The iDRAC upgrade utility will accept a .EXE file.

SSH crypto cyphers can be manually updated in iDRAC 9 by following the steps from Dell's website HERE.

SSH can be disabled in the iDRAC. Log in to the iDRAC interface and search for SSH in the top right corner search box. The result will take you directly to the Services -> SSH menu to Enable or Disable SSH.

Additional Information