Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2015-4000

Quick assessment

Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

TLS是IETF标准组织的一个传输层安全性协议，目的是为互联网通信提供安全及数据完整性保障。 TLS协议1.2及之前版本中存在加密问题漏洞，该漏洞源于当服务器启用DHE_EXPORT密码套件时，程序没有正确传递DHE_EXPORT选项。攻击者可通过重写ClientHello（使用DHE_EXPORT取代DHE），然后重写ServerHello（使用DHE取代DHE_EXPORT），利用该漏洞实施中间人攻击和cipher-downgrade攻击。

AI Predicted 5.9 Difficulty: Easy EPSS 99.86% · P100

Public Exploits 1

Metasploit · 1 ssl_version.rb#CVE-2015-4000 [auxiliary]

Affected Version Matrix 1

VendorProduct Version RangeStatus
n/a n/a n/a affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2015-4000

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
TLS 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TLS是IETF标准组织的一个传输层安全性协议，目的是为互联网通信提供安全及数据完整性保障。 TLS协议1.2及之前版本中存在加密问题漏洞，该漏洞源于当服务器启用DHE_EXPORT密码套件时，程序没有正确传递DHE_EXPORT选项。攻击者可通过重写ClientHello（使用DHE_EXPORT取代DHE），然后重写ServerHello（使用DHE取代DHE_EXPORT），利用该漏洞实施中间人攻击和cipher-downgrade攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2015-4000

# POC Description Source Link Shenlong Link
1 ✨ HAProxy ve Keepalived konusunu load balancer ve cluster'a ek olarak güvenlik(zayıf SSL/Kripto Kullanımı (LOGJAM) (CVE-2015-4000) zafiyeti önlemi) ve yüksek yüklere karşı ele alır. https://github.com/fatlan/HAProxy-Keepalived-Sec-HighLoads POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-4000

请登录查看更多情报信息。

Vendor Advisories for CVE-2015-4000 (120)

Mailing List Discussions for CVE-2015-4000 (53)

Security Blog Posts for CVE-2015-4000 (1)

Other References for CVE-2015-4000 (37)

Same Patch Batch · n/a · 2015-05-21 · 9 CVEs total

CVE-2012-1978 Simple PHP Agenda 跨站请求伪造漏洞
CVE-2015-3647 WordPress WP Photo Album Plus插件输入验证漏洞
CVE-2015-4018 WordPress FeedWordPress插件SQL注入漏洞
CVE-2015-3911 Huawei E587 Mobile WiFi 权限许可和访问控制漏洞
CVE-2015-3912 Huawei E355s Mobile WiFi 信息泄露漏洞
CVE-2015-0741 Cisco Prime Central for Hosted Collaboration Solution 跨站请求伪造漏洞
CVE-2015-0742 Cisco Adaptive Security Appliances Software Protocol Independent Multicast 代码注入漏洞
CVE-2015-3036 Linux kernel KCodes NetUSB模块基于栈的缓冲区溢出漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2015-4000

No comments yet

Leave a comment