CVE-2021-41617 OpenSSH Privilege Escalation Vulnerability

Products

• VMware Smart Assurance

Issue/Introduction

OpenSSH Privilege Escalation Vulnerability in all NCM servers

Environment

NCM 10.1.x / 24.3.x

Resolution

It is advised to upgrade to OpenSSH 8.8 or later to remediate this vulnerability. So the recommendation is to upgrade NCM to 24.3.10 where OpenSSH is upgraded to 9.x

Additional Information

NCM 24.3.10 Release notes: Network Configuration Manager Release Notes 24.3.10