CVE-2017-15326

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-23 · updated 2026-06-17
Weakness: CWE-327

Description

DBS3900 TDD LTE V100R003C00, V100R004C10 have a weak encryption algorithm security vulnerability. DBS3900 TDD LTE supports SSL/TLS protocol negotiation using insecure encryption algorithms. If an insecure encryption algorithm is negotiated in the communication, an unauthenticated remote attacker can exploit this vulnerability to crack the encrypted data and cause information leakage.

Affected products

Huawei Technologies Co., Ltd. DBS3900 TDD LTE: v100r003c00, v100r004c10

References

http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180321-01-encryption-en
http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180321-01-encryption-en

Get alerted when CVE-2017-15326 or the next vulnerability affects your stack