Dropbear SSH Server

[Robust]

Hi

After I do the Pentest, there has found this problem.
In the firewall have issue of " DROPBEAR SSH SERVER < 2016.72 MULTIPLE VULNERABBILITIES'
Can anyone help me for this issue.
Why it happen and any solution for this issue?

Thanks

[Gertjan]

@robust

Good news !
pfSense doesn't use "Dropbear".

Please explain how and what you are testing.

On the WAN side, nothing is open by default, so there will be no issue.
On the LAN side, everything is open, as that is the place where you put your trusted devices.
You have non-trusted devices ? Still no issue, put them on a second pfSense LAN interface, and chose your block/pass firewall rules wisely.

@robust said in Dropbear SSH Server:

Why it happen and any solution for this issue?

No solution needed as there is no problem.
Still, it's up to you to explain, as asked above.
While detailing, you most probably find the reason yourself.

[johnpoz]

@robust pfsense does not run dropbear ssh.. You must be something else when you do your test. My APs for example run old dropbear.

[22.05-RELEASE][admin@sg4860.local.lan]/root: ssh -V
OpenSSH_8.8p1, OpenSSL 1.1.1n-freebsd  15 Mar 2022

Here is AP for example

Hallway-BZ.6.2.26# ssh -V
Dropbear v2020.81
Hallway-BZ.6.2.26#

[Robust]

@johnpoz Thank you I will try it

[WhoAmI68]

@Robust Have you solved the issue? Where did you find the Dropbear?