SSH Weak Key Exchange Algorithms Enabled on UniFi Wireless Access Points
Subject: SSH Weak Key Exchange Algorithms Enabled on UniFi Wireless Access Points
Good day from Singapore,
I have discovered that UniFi Wireless Access Points are powered by Busybox.
Vulnerability scanning of my client's corporate network shows SSH weak key exchange algorithms enabled on UniFi wireless access points.
Article: SSH WEAK KEY EXCHANGE ALGORITHMS ENABLED
Link: https://www.virtuesecurity.com/kb/ssh-weak-key-exchange-algorithms-enabled/
According to the above article, we must make changes to /etc/sshd/sshd_config, especially the KexAlgorithms directive.
However, when I putty/SSH into Busybox, I cannot find the file /etc/sshd/sshd_config. What SSH server is running inside Busybox?
How can I make changes to the SSH server within Busybox so that I can disable the SSH weak key exchange algorithms?
Please advise.
Thank you.
By the way, I also noticed that Hikvision Face Recognition Terminal Door Access Systems are also powered by Busybox.
I am doing this for an investment company at Keppel Road, Singapore.
Regards,
Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com
REFERENCES
=============
[1] http://lists.busybox.net/pipermail/busybox/2022-October/089937.html
[2] https://www.mail-archive.com/busybox@busybox.net/msg28544.html
Comments
Post a Comment