The network element must not use SSH Version 1 for administrative access.

From Infrastructure Router Security Technical Implementation Guide Cisco

Part of The network element must not allow SSH Version 1.

SV-15460r2_rule The network element must not use SSH Version 1 for administrative access.

Vulnerability discussion

SSH Version 1 is a protocol that has never been defined in a standard. Since SSH-1 has inherent design flaws which make it vulnerable to, e.g., man-in-the-middle attacks, it is now generally considered obsolete and should be avoided by explicitly disabling fallback to SSH-1.

Check content

If SSH is used for administrative access, then Version 2 must be configured as shown in the following example: ip ssh version 2

Fix text

Configure the network device to use SSH version 2.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.