Is CoreSSH Server Impacted by the xz Utils Vulnerability

Question:

Is CoreSSH Server impacted by the xz Utils Vulnerability (CVE-2024-3094)? For further details, please read the official NIST CVE notice.

Answer:

After review, our developers determined CoreSSH Server is not affected by this vulnerability in any way. The vulnerability creates a backdoor in SSH authentication and thus allows the attacker to gain unauthorized access to the system. Our products do not use OpenSSH, xz, or liblzma and therefore not affected.