PowerChute Business Edition V9 and SSL Certificates

[BillP]

This question was originally posted by Carl on APC forums on 11/23/2010

---

I have PowerChute Business Edition V9 Agent, Server, and Console installed on two Windows/2008 Server systems, monitoring two APC SU5000 units. My organization uses a Vulnerability Scanner that has declared that PCBE uses SSL Anonymous Cipher Suites on ports 2161 and 2260. I have found other discussion threads talk about this, but they were never resolved (http://forums.apc.com/spaces/4/back-ups-surge-protectors/forums/general/4496/consistently-get-unable... http://forums.apc.com/spaces/4/back-ups-surge-protectors/forums/general/4573/3-month-old-xs-900-turn...).

Has there been any resolution to this SSL Anonymous Cipher exposure?

Thanks.

[BillP · Accepted solution]

This reply was originally posted by Angela on APC forums on 11/23/2010

---

from what i was able to research, i believe this has been addressed for PCBE revision 61038. reference that other post for my initial response and the security risk based on what is transported on those ports.

can you let me know what version of the agent you have under Help->About System?

i dont work on PCBE directly but from what I saw, the issue is closed and indicated it was fixed.