Is PowerChute Network Shutdown VM affected by CVE-2024-6387?
Issue:
PowerChute Network Shutdown version 5.1 VM is affected by CVE-2024-6387 if the SSH service has been enabled.
NOTE: By default, SSH is not enabled on the PowerChute AlmaLinux VM.
Products:
PowerChute Network Shutdown v5.1
Environment:
PowerChute Network Shutdown v5.1 AlmaLinux VM on VMware ESXi when SSH has been enabled.
Cause:
OpenSSH v 8.0p1-24.el8.x86_64
Solution:
Upgrade OpenSSH or disable the SSH service. Recommended to upgrade OpenSSH.
To upgrade OpenSSH, log into the PowerChute VM as root and run the command
dnf --refresh upgrade openssh
To verify OpenSSH has upgraded, run the command
rpm -q openssh
For more information on CVE-2024-6387 go to the link below.
https://almalinux.org/blog/2024-07-01-almalinux-9-cve-2024-6387/
PowerChute Network Shutdown version 5.1 VM is affected by CVE-2024-6387 if the SSH service has been enabled.
NOTE: By default, SSH is not enabled on the PowerChute AlmaLinux VM.
Products:
PowerChute Network Shutdown v5.1
Environment:
PowerChute Network Shutdown v5.1 AlmaLinux VM on VMware ESXi when SSH has been enabled.
Cause:
OpenSSH v 8.0p1-24.el8.x86_64
Solution:
Upgrade OpenSSH or disable the SSH service. Recommended to upgrade OpenSSH.
To upgrade OpenSSH, log into the PowerChute VM as root and run the command
dnf --refresh upgrade openssh
To verify OpenSSH has upgraded, run the command
rpm -q openssh
For more information on CVE-2024-6387 go to the link below.
https://almalinux.org/blog/2024-07-01-almalinux-9-cve-2024-6387/
Publié pour: Schneider Electric Belgium
Besoin d'aide ?
Sélectionnez le bon produit
Trouvez rapidement et facilement les produits et accessoires adaptés à vos applications.
Obtenir un devis
Effectuez une demande de renseignements en ligne et un expert vous contactera.
Où acheter ?
Trouvez facilement le distributeur Schneider Electric local le plus proche.
Centre d'aide
Trouvez des ressources de support pour tous vos besoins, en un seul endroit.