1 Rookie

 • 

65 Posts

 • 

8 Points

145

June 15th, 2026 05:09

Vulnerability related to IPMI

what is the best way to fix this issue ? 


Vulnerability ID
ipmi2-rmcp-rakp-username-disclosure

s5l-weak-message-authentication-code-algorithms
ipmi15-getchannelauth-disclosure

ipmi2-rmcp-rakp-hmac-password-hash-exposure

Moderator

 • 

3.8K Posts

 • 

25.5K Points

June 17th, 2026 05:48

No, the SSH command you listed will not fix the IPMI disclosure issues. It may fix a separate SSH weakness finding, but to address the IPMI and TLS findings you need to harden or disable the BMC/IPMI service, update firmware, restrict access, and remove weak TLS MAC algorithms 

1 Rookie

 • 

65 Posts

 • 

8 Points

June 15th, 2026 07:09

Hi Team,

Will this fix the issue ? 

Disable weak SSH algorithms 

Steps using RACADM (Requires dell tool to be downloaded):

  1. SSH to iDRAC IP address
    2. Type command "racadm get idRAC.SSHCrypto.KexAlgorithms"
    3. Remove weaker Algorithms and type "racadm setidRAC.SSHCrypto.KexAlgorithms"
    4. Type command "racadm get idRAC.SSHCrypto.Ciphers"
    5. Remove weaker ciphers and type "racadm setidRAC.SSHCrypto.Ciphers"

1 Rookie

 • 

65 Posts

 • 

8 Points

June 15th, 2026 07:32

how to fix this below

ssl-weak-message-authentication-code-algorithms

Disable any weak HMAC algorithms within the TLS configuration

No Events found!

Top