cve-2009-3555

[PanIst]

Hello

When scanning management interface or enabled https layer3  interface it shows the related vulnerability,

is there a way to fix.version is 6.1.10

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3555”

thanks.

[Raido_Rattameister]

Device > Setup > Management > General Settings > SSL/TLS Service Profile

There you can specify what certificate is shown when you access mgmt interface.

Also you can change what protocol  version mgmt interface can use.

Try to chane min version to TLS 1.2 for example and scan again.

Vulnerability still shows up?

[PanIst]

Hello

So we should upgrade you mean ? This is a feature works after 7.0.x

Thanks