ID de Prueba:	1.3.6.1.4.1.25623.1.0.150713
Categoría:	SSL and TLS
Título:	Weak Key Exchange (KEX) Algorithm(s) Supported (SSH)
Resumen:	The remote SSH server is configured to allow / support weak key; exchange (KEX) algorithm(s).
Descripción:	Summary: The remote SSH server is configured to allow / support weak key exchange (KEX) algorithm(s). Vulnerability Insight: - 1024-bit MODP group / prime KEX algorithms: Millions of HTTPS, SSH, and VPN servers all use the same prime numbers for Diffie-Hellman key exchange. Practitioners believed this was safe as long as new key exchange messages were generated for every connection. However, the first step in the number field sieve-the most efficient algorithm for breaking a Diffie-Hellman connection-is dependent only on this prime. A nation-state can break a 1024-bit prime. Vulnerability Impact: An attacker can quickly break individual connections. Solution: Disable the reported weak KEX algorithm(s) - 1024-bit MODP group / prime KEX algorithms: Alternatively use elliptic-curve Diffie-Hellmann in general, e.g. Curve 25519. CVSS Score: 4.6 CVSS Vector: AV:A/AC:H/Au:N/C:C/I:N/A:N
Copyright	Copyright (C) 2021 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.