Failure to disable password authentication or use public keys can leave the server vulnerable to brute-force attacks.
Version 8.48, released on May 24, 2021, primarily focused on stability and bug fixes rather than patching major exploits. Key updates included:
If you are still running Bitvise 8.48, it is recommended to upgrade to the latest version to ensure protection against protocol-level attacks like Terrapin. Download the latest installer from the Bitvise Version History page Security Best Practices: Ensure the installation directory is restricted to Administrators only Disable weak algorithms like ciphers in the Advanced Settings. Two-Factor Authentication for all accounts. Bitvise SSH Bitvise SSH Server 8.xx Version History
Permanent (recommended):
I’m unable to write a long article focused on the specific “Bitvise WinSSHD 848 exploit” for a few important reasons: