DCE 7.2.1 weak point issue by security scan

[DCIM_Support]

Hi Team ,

Our customer used DCE 7.2.1 and had been scan by security scan recently , the weak name as below:

1. OpenSSH schnorr.c Remote Memory Corruption Vulnerability ==>suggestion :upgrade to the newest version for OpenSSH
2. Test HTTP dangerous methods ==>suggestion :cancel PUT，DELETE，TRACE，CONNECT method

Does our new version can fix above teo issues ?  Your input would be appreciate .
 

Best Regards

(CID:110006939)

[DCIM_Support]

Hi Chu,

DCE has had several upgrades since 7.2.1, so any vulnerabilities in that version would have been resolved.
You should advise the customer to upgrade to the latest version 7.4.1 after validating their software support contract. You can find more information on DCE security on the link below.

https://dcimsupport.apc.com/display/public/UADCE725/StruxureWare+Data+Center+Expert+Security

Regards

(CID:110006972)

[DCIM_Support]

Hi John , Thank you for advise ,I would suggest our customer , thanks. Best Regards

(CID:110007036)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.