Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-35088— Inadequate Encryption Strength in Slican telephone exchanges

Quick assessment

Affected
Slican IPx
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Slican 电话交换机在 TCP/IP 通信中采用对称加密机制。秘密密钥被硬编码在多个二进制文件中。攻击者若能访问这些文件，即可解密通信内容。 此问题已在 IPx 系列版本 6.62.0100 中得到修复。 以下已停止支持的（End-Of-Life）电话交换机仍存在该漏洞： CCT-1668 (CCT1CPU) MAC-6400 CXS-0424 这些产品已于 2011 年和 2012 年停产，且不再提供软件更新。这些产品需进行硬件升级才能接收软件更新。厂商建议这些设备的用户直接联系其服务部门，以了解可用的升级选

CVSS 8.2 · High EPSS 0.12% · P2

Possible ATT&CK Techniques 1 AI

T1552.004 · Private Keys

Affected Version Matrix 4

VendorProduct Version RangeStatus
Slican CCT-1668 ≤ 6.56.0430 affected
Slican CXS-0424 ≤ 6.30.0510 affected
Slican IPx < 6.62.0100 affected
Slican MAC-6400 ≤ 6.56.0430 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-35088

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Inadequate Encryption Strength in Slican telephone exchanges
Source: CVE Program / CVE List V5
Vulnerability Description
Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life telephone exchanges: - CCT-1668 (CCT1CPU) - MAC-6400 - CXS-0424 These products were discontinued in 2011 and 2012 and and will not receive updates. These products require a hardware update in order to receive a software update. The vendor recommends that users of these devices contact the their service department directly to determine the options for upgrading.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的加密强度
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Slican IPx 0 ~ 6.62.0100 -
Slican CCT-1668 0 ~ 6.56.0430 -
Slican MAC-6400 0 ~ 6.56.0430 -
Slican CXS-0424 0 ~ 6.30.0510 -

II. Public POCs for CVE-2026-35088

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-35088

请登录查看更多情报信息。

Security Blog Posts for CVE-2026-35088 (1)

Same Patch Batch · Slican · 2026-10-15 · 3 CVEs total

CVE-2026-63314 8.7 HIGH SQL Injection in WebCTI
CVE-2026-63315 8.2 HIGH Plaintext storage of a password in WebCTI

IV. Related Vulnerabilities

Same product: IPx
Same vendor: Slican
Same weakness: CWE-326

V. Comments for CVE-2026-35088

No comments yet

Leave a comment