Guest

Preview Tool

Cisco Bug: CSCur11419 - PRSM supports medium weak SSH ciphers and SSH MAC algorithms

Last Modified

Nov 02, 2018

Products (1)

  • Cisco ASA Next-Generation Firewall Services

Known Affected Releases

100.6(0.0.12)

Description (partial)

Symptom:
PRSM  and CX was identified to support medium weak SSH ciphers (CBC) and weak SSH MAC algorithms (96-bit MAC)


ssh ciphers:
aes128-cbc
aes192-cbc
aes192-cbc
aes256-cbc

SSH MAC algorithms :
hmac-sha1-96
hmac-md5-96 


The following Cisco products

ASA-CX 5512
ASA-CX 5515
ASA-CX 5525
ASA-CX 5545
ASA-CX 5555
ASA-CX 5585-10
ASA-CX 5585-20
ASA-CX 5585-40
ASA-CX 5585-60

All ASA-CX versions released through 2014-12-21 are affected.

Conditions:
Devices with default configuration.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.