Return
-
Title
Is UC analytics vulnerable against CVE 2023 48795 Terrapin? -
Description
Can you confirm whether UC analytics is vulnerable against CVE-2023-48795 - Terrapin? -
Resolution
In the CVE 2023-48795
The Terrapin attack allows an attacker with the ability to intercept SSH traffic on the PAN-OS management network (machine-in-the-middle or MitM attacks) to downgrade connection security and force the usage of less secure client authentication algorithms when an administrator connects to PAN-OS software.
In UCA we are not using PAN-OS management network, so we are not affected by this CVE.