Description

This article explains the procedure to disable SSH ciphers in Space

Symptoms

You may observe SSH Server CBC Mode Ciphers Enabled plugin (70658) Vulnerability.

Solution

 

1.Copy the sshd_config file to /home/admin location using the below command.

 

# cp /etc/ssh/sshd_config /home/admin/

 

2. Please use the command vi /etc/ssh/sshd_config to edit ciphers.

 

# vi /etc/ssh/sshd_config

 

Before
==================

# cat /etc/ssh/sshd_config | grep Cipher

Ciphers aes128-ctr,aes256-ctr,aes256-cbc


After
==================

# cat /etc/ssh/sshd_config | grep Cipher

Ciphers aes128-ctr,aes256-ctr

Note: Press "i" to edit. Finally,save the file using Esc and wq!

 

3. Post which restart the SSHD service.

 

# service sshd restart

 

Modification History

2025-12-10 : Article Created