Description
Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication.

This issue was fixed in IPx series version 6.62.0100.

The issue STILL EXISTS in End-Of-Life telephone exchanges:
- CCT-1668 (CCT1CPU)
- MAC-6400
- CXS-0424
These products were discontinued in 2011 and 2012 and and will not receive updates. These products require a hardware update in order to receive a software update. The vendor recommends that users of these devices contact the their service department directly to determine the options for upgrading.
Published: 2026-10-15
Score: 8.2 High
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 15 Oct 2026 13:30:00 +0000

Type Values Removed Values Added
Description Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life telephone exchanges: - CCT-1668 (CCT1CPU) - MAC-6400 - CXS-0424 These products were discontinued in 2011 and 2012 and and will not receive updates. These products require a hardware update in order to receive a software update. The vendor recommends that users of these devices contact the their service department directly to determine the options for upgrading.
Title Inadequate Encryption Strength in Slican telephone exchanges
First Time appeared Slican
Slican cct-1668
Slican cxs-0424
Slican ipx
Slican mac-6400
Weaknesses CWE-326
CPEs cpe:2.3:a:slican:cct-1668:*:*:*:*:*:*:*:*
cpe:2.3:a:slican:cxs-0424:*:*:*:*:*:*:*:*
cpe:2.3:a:slican:ipx:*:*:*:*:*:*:*:*
cpe:2.3:a:slican:mac-6400:*:*:*:*:*:*:*:*
Vendors & Products Slican
Slican cct-1668
Slican cxs-0424
Slican ipx
Slican mac-6400
References
Metrics cvssV4_0

{'score': 8.2, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N'}

Subscriptions

Slican Cct-1668 Cxs-0424 Ipx Mac-6400
cve-icon MITRE

Status: PUBLISHED

Assigner: CERT-PL

Published:

Updated: 2026-10-15T13:48:28.306Z

Reserved: 2026-04-01T11:23:16.118Z

Link: CVE-2026-35088

cve-icon Vulnrichment

Updated: 2026-10-15T13:48:25.577Z

cve-icon NVD

Status : Received

Published: 2026-10-15T09:17:17.417

Modified: 2026-10-15T14:17:24.853

Link: CVE-2026-35088

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-326

    Inadequate Encryption Strength