topic Re: cve-2009-3555 in General Topics

cve-2009-3555

PanIst — Tue, 14 Jun 2016 15:06:46 GMT

Hello

When scanning management interface or enabled https layer3 interface it shows the related vulnerability,

is there a way to fix.version is 6.1.10

thanks.

Raido_Rattameister — Tue, 14 Jun 2016 22:11:30 GMT

Device > Setup > Management > General Settings > SSL/TLS Service Profile

There you can specify what certificate is shown when you access mgmt interface.

Also you can change what protocol version mgmt interface can use.

Try to chane min version to TLS 1.2 for example and scan again.

Vulnerability still shows up?

PanIst — Wed, 15 Jun 2016 19:14:43 GMT

Hello

So we should upgrade you mean ? This is a feature works after 7.0.x

Thanks