Solarwinds NCM hotfix for CVE-2023-48795 vulnerability .

bourlis

Can someone please supply a timeline for when we can get a hotfix to address the SSH Terrapin Prefix Truncation Weakness (CVE-2023-4879) for the Orion Platform or NCM?

https://nvd.nist.gov/vuln/detail/CVE-2023-48795

https://www.helpnetsecurity.com/2023/12/19/ssh-vulnerability-cve-2023-48795/

https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/ 

Or at the very least a work around?

Thank you 

HansenRJ

I just popped for this on my Orion IIS Server.   Any info on remediating would help.  Thanks