The network device must not allow SSH Version 1 to be used for administrative access.

From Perimeter L3 Switch Security Technical Implementation Guide

Part of The network element must not allow SSH Version 1.

SV-15459r4_rule The network device must not allow SSH Version 1 to be used for administrative access.

Vulnerability discussion

SSH Version 1 is a protocol that has never been defined in a standard. Since SSH-1 has inherent design flaws which make it vulnerable to attacks, e.g., man-in-the-middle attacks, it is now generally considered obsolete and should be avoided by explicitly disabling fallback to SSH-1.

Check content

Review the configuration and verify SSH Version 1 is not being used for administrative access. If the device is using an SSHv1 session, this is a finding.

Fix text

Configure the network device to use SSH version 2.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.