Comware

 View Only

  • 1.  Vulnerability on switch 5120 JE068A

    Posted May 08, 2025 04:29 AM

    Good morning, I have some news about the 5120 JE068A devices since when performing a scan it is showing the vulnerability (SSH Server CBC Mode Ciphers Enabled), but the device does not allow configuring the SSH encryption algorithms, I see that it is due to the software version, currently I have the latest version for these devices, Comware 5.20 Release R2222P11. Is there a solution other than replacing it with a more recent model that offers support for advanced security configurations and periodic updates?



  • 2.  RE: Vulnerability on switch 5120 JE068A

    Posted May 09, 2025 01:52 AM

    Hello Coltoper,

    HPE 5120 (JE068A) is Comware5 device, There is no way to configure SSH algorithoms in Comware5.  

    What you can do is, Configfure SSH server ACL to block unsolicited or unwanted SSH login . 

    Create ACL
    [HPE]acl number 2000
    [HPE-acl-basic-2000]rule 0 permit source <source IP/network>  <Wildcard mask>
    [[HPE-acl-basic-2000]quit
    Apply ACL for SSH
    [HPE]user-interface vty 0 4
    [HPE-ui-vty0-4]acl 2000 inbound
    [HPE-ui-vty0-4]quit

    Eventually H/W upgrade will be the go-forward plan. 



    ------------------------------
    Thank you

    Santanu
    ------------------------------



  • 3.  RE: Vulnerability on switch 5120 JE068A

    Posted May 09, 2025 11:29 AM

    Hello Dassant, thank you very much for your clarification.


    Original Message


Related Content