Hi [NAME],   Usually for vulnerabilities, a support case need to be opened and pass to the engineering for checks. Unfortunately the community support here would not be much help. Was thinking of suggesting if there are any possibilities to disable SSH, but that would affect the iDRAC to function well. Have you tried contacting the support, or it's just an assumption that support case cannot be open because of no warranty contract? Do give a try.     
Our vulnerability scanner detected multiple vulnerabilities on OpenSSH running on iDrac9. The solution is to update the OpenSSH version to 9.3p2. I've tried installing the latest iDrac firmware version 7 however, it did not address the vulnerability. Is there a workaround for this? I can no longer open a case with Dell as our license has expired. Appreciate for the response.
OpenSSH vulnerabilities on iDracs