PowerLogic T500 - Why are SSH sessions impossible? For cybersecurity reasons

[mukhlis_eac]

We did successfully the ssh session (by PuTTY) from Laptop to SaitelDP/T300 device.
But with the same procedure, It did not work on T500. After We filled the user and password, suddenly the session was CLOSE.

Please advice the proper procedure for T500.

[Santiago_Antonanzas]

Because of cibersecurity reasons, ssh connections have been disabled on HU280.

[JuanRayo · Accepted solution]

Hello Muklis.

Apology for the delay in my answer. SSH access is no longer available. As you know T500 has cybersecurity as one of its pillars and it is well-known that ssh has some security breaches that can be exploited. 

So webAPP is now the main way to access remotely to our HU280 (T500) and this is why we are trying to give it more and more functionality.

Sorry for that.

[waihoong]

@JuanRayo can you provide more details in which or what security breach that SSH will lead to? Is it vulnerability of CVE-2024-6387?  Any patch provided for this and etc? Reason being that we have RTU spec from customer asking about SSH. We need to provide a detailed explanation to the customer why SSH is no longer supported in our RTU.

[JuanRayo]

Hello. These are some reasons for this

CVE-2024-6387

CVE-2023-48795

[mukhlis_eac]

Hi Juan,

Actually that We a test ping from T500 to scada, the purpose to check the TCP/IP connection is OK.

BR
Mukhlis.