Netbotz 5.5.2 Firmware OpenSSH Version

[sc_460]

My botz are getting flagged for multiple OpenSSH vulnerabilities and the recommendation is to upgrade to v10.3.  I can't seem to locate what version OpenSSH is included in the 5.5.2 firmware in the release notes. Anyone have confirmation of what version that is ? 

[jchiglo]

I also need this upgraded soon. 

[Cory_McDonald]

Hello @sc_460 & @jchiglo,

Schneider Electric takes product security and vulnerability management seriously. We build security into our products and actively identify and address vulnerabilities to help customers operate their systems securely.

As a standard security practice, we do not disclose specific software versions. If you can share the security scanning tool used and the specific CVEs identified, we would be happy to review them and provide any applicable mitigations or remediation guidance.

Kind Regards,

Cory

[sc_460]

Thanks @Cory_McDonald   My organization uses Tenable Security Center and the CVE's identified are: CVE-2026-35386, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, and CVE-2026-35414.  For reference, our Netbotz are currently running version 5.4.1.5027

[Cory_McDonald]

@sc_460, 

Can you perform and upgrade to 5.5.2 and let me know if anything is still flagged.  Security upgrades are performed each release.  If you can, that would be appreciated so we can provide the team with the CVEs that are being flagged against the most recent version and the remediation steps or mitigation recommendations for the current release.

Kind Regards,

Cory

[MD_Final]

@sc_460 can you provide an update/answer?

[sc_460]

Thanks for the reminder.  The update does resolve the CVE's I listed previously.  Took a while to get pushed through change management and implemented, but the CVE's drop off the Tenable report after the update is applied.