Palo Alto SSH Vulnerabilities

[Sethupathi]

Hi Team,

We are finding the below vulnerabilities being detected on Palo Alto Management SSH service :

CVE-2007-2768

CVE-2004-1653

CVE-2007-2243

CVE-2016-2183

Kindly help us in resolving the above said vulnerabilities.  Devices are running with the OS 8.0.16.

Regards,

Sethupathi M

[reaper]

it's recommended to set the management interface on a private network and add only a few allowed IP addresses to access management, to limit the attack surface of any potential bad actor some of these are for pretty old openssh version, may want to check with TAC if your scan is accurate