Synology DSM 6.2 SSH Terrapin fix

I wrote this post half a year ago, but forgot to publish it. Nevertheless, I think it can still be useful.

As you may already know, Synology still hasn’t released a fix for this vulnerability, even though it was discovered almost a year ago. I use an old Synology RS3412RPxs server. The latest DSM version is still the 6.2.4-25556 Update 7 which came out on 2023-05-02. Okay, it’s a 12 year old server, so no surprise it’s EoL. According to this forum post there’s an alternative solution to the problem: turning off the affected ciphers.

Read the rest of this entry »