SSH Attack Surface (CVE-2023-48795): Find and Patch With CyberSecurity Asset Management Before the Grinch Arrives

This Qualys blog post describes CVE-2023-48795 (the “Terrapin Attack”), a vulnerability in OpenSSH (<9.6) and other SSH implementations that allows an active MITM to omit or delete SSH handshake messages, degrading security features and enabling interception or compromise; it outlines affected software, prevalence statistics across global assets, detection queries and QIDs for Qualys products, and recommended immediate and long-term remediation actions including patching, inventorying SSH instances, and improving key/access controls.