ssh access to the ME4/U144/U840 management controller may be vulnerable to cve-2023-48795

Products

• Security Analytics

Issue/Introduction

ME4/U144/U840 management controller may be vulnerable to the cve-2023-48795 via ssh.  ssh can be disabled in the Web UI.

Environment

Dell ME4/U144/U840

Resolution

ssh can be disabled in he management controller for the ME4/U144/U840 storage arrays.  Login to the Web UI and select Home -> Action -> System Settings -> Services and deselect SSH. 

Test by using ssh to connect to the same IP address used to access the Web UI.