Diffie-Hellman ephemeral vulnerability, CVE-2002-20001, DHeater

Question

All of our Sophos FW devices are showing vulnerabilities on internal and external interfaces. 
 Is this a false positive, and if not is there a resolution, which will not break core functionality of product? 
 I believe Advisory: OpenSSL DoS vulnerability (CVE-2022-0778), may address the same issue. (March 2022).

Vivek Jagad · Accepted Answer

Hello AstaroNBack ,

Thank you for reaching out to the community, CVE-2002-20001 ( Openssl) - We do not consider this to be a vulnerability in OpenSSL- https://www.openssl.org/news/vulnerabilities.html | CVE-2002-20001 - (OpenSSH) - Not affected, already disable in sshd_config [Ref-NC-91425]

Diffie-Hellman ephemeral vulnerability, CVE-2002-20001, DHeater

Top Replies