Forum Discussion

nurairtt91's avatar
nurairtt91
Icon for Altocumulus rankAltocumulus
Jul 20, 2025
Solved

OpenSSH vulnerability

Qualys tool reported the following vulnerability , open ssh expected behaviour violation vulnerability cve-2025-32728 I couldn't find any F5 article for this. How we can mitigate this? Is there a w...
  • VGF5's avatar
    Jul 20, 2025

    Hi

    what is your current version of F5 ?

    As of now, there is no official F5 security advisory or article specifically addressing CVE-2025-32728 in the  support portal or in their Quarterly Security Notification (Feb 2025)  Refer: 

    K000149540: Quarterly Security Notification (February 2025)

    Run ssh -V

    Check if the vulnerability affects your specific OpenSSH version. If your version is not affected, you may not need to take action.

    Meanwhile, restrict SSH access to trusted IPs only via the F5 management interface or firewall rules.

    The last option is contact the support.