← Vulnerability feed

Vulnerability record · CVE-2017-15326 · published 23 March 2018

CVE-2017-15326: Huawei dbs3900 tdd lte firmware broken cryptographic algorithm vulnerability

Huawei · Dbs3900 Tdd Lte Firmware

DBS3900 TDD LTE V100R003C00, V100R004C10 have a weak encryption algorithm security vulnerability. DBS3900 TDD LTE supports SSL/TLS protocol negotiation using insecure encryption algorithms. If an insecure encryption algorithm is negotiated in the communication, an unauthenticated remote attacker can exploit this vulnerability to crack the encrypted data and cause information leakage.

4.3 CVSS 3.0 Medium EPSS 0.44% · top 63.2% CWE-327 · Broken cryptographic algorithm
4.3CVSS 3.0 base score, v2 4.3
0.44%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

DBS3900 TDD LTE V100R003C00, V100R004C10 have a weak encryption algorithm security vulnerability. DBS3900 TDD LTE supports SSL/TLS protocol negotiation using insecure encryption algorithms. If an insecure encryption algorithm is negotiated in the communication, an unauthenticated remote attacker can exploit this vulnerability to crack the encrypted data and cause information leakage.

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180321-01-encryption-en Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180321-01-encryption-en Vendor Advisory

Track CVE-2017-15326 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2019-19413Huawei dbs3900 tdd lte firmware integer overflow vulnerabilityThere is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could expl…EPSS 0.96%7.5CVE-2019-19414Huawei dbs3900 tdd lte firmware integer overflow vulnerabilityThere is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation, a remote attacker could expl…EPSS 0.96%

Source: NIST National Vulnerability Database (record CVE-2017-15326), CISA KEV, FIRST EPSS (scores of 2026-10-17). This page is refreshed as NVD updates the record.