What is CVE-2017-15326?

CVE-2017-15326 is a medium-severity vulnerability in Huawei Dbs3900_tdd_lte, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 4.3/10. Published 2018-03-23.

How severe is CVE-2017-15326?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Huawei Dbs3900_tdd_lte

CVE-2017-15326

DBS3900 TDD LTE V100R003C00, V100R004C10 have a weak encryption algorithm security vulnerability. DBS3900 TDD LTE supports SSL/TLS protocol negotiation using insecure encryption algorithms. If an insecure encryption algorithm is negotiated…

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.004 (36.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.

Affected products

Huawei Dbs3900_tdd_lte
Huawei Dbs3900_tdd_lte_firmware — versions v100r003c00, v100r004c10
Huawei Technologies Co., Ltd. Dbs3900 Tdd Lte — versions V100R003C00, V100R004C10

Weakness classification (CWE)

CWE-327 — Use of a Broken or Risky Cryptographic Algorithm

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-15326?: CVE-2017-15326 is a medium-severity vulnerability in Huawei Dbs3900_tdd_lte, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 4.3/10. Published 2018-03-23.
How severe is CVE-2017-15326?: Medium severity. CVSS v3 base score is 4.3 out of 10.