[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.

Post Reply 
Thread Rating:
  • 1 Votes - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
SSL Certificate Signed Using Weak Hashing Algorithm
Author Message
LaughingBoy Offline
Junior Member

Posts: 1
Joined: May 2023
Reputation: 0
Post: #1
SSL Certificate Signed Using Weak Hashing Algorithm
We recently had an internal security scan and this result showed up referencing all of our yealink phones:

An SSL certificate in the certificate chain has been signed using a weak hash algorithm.

The remote service uses an SSL certificate chain that has been signed using a cryptographically weak hashing algorithm (e.g. MD2, MD4, MD5, or SHA1). These signature algorithms are known to be vulnerable to collision attacks. An attacker can exploit this to generate another certificate with the same digital signature, allowing an attacker to masquerade as the affected service.

The following certificates were part of the certificate chain sent by
the remote host, but contain hashes that are considered to be weak.

Subject : C=CN/ST=Fujian/L=Xiamen/O=Yealink Network Technology Co.,Ltd./OU=Yealink Equipment/CN=[SCRUBBED]/E=support@yealink.com
Signature Algorithm : MD5 With RSA Encryption
Valid From : Mar 01 00:00:00 2014 GMT
Valid To : Feb 24 00:00:00 2034 GMT

Can Yealink please provide an ssl certificate that has stronger encryption so that we can pass our security audit?
07-06-2023 03:17 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 

Messages In This Thread
SSL Certificate Signed Using Weak Hashing Algorithm - LaughingBoy - 07-06-2023 03:17 AM

Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  T31 Web UI certificate grant.horne 0 502 03-15-2024 05:48 PM
Last Post: grant.horne
  802.1x and trusted certificate JohanFer 0 1,046 05-16-2023 01:45 PM
Last Post: JohanFer
  Broken Certificate CAVoIPGirl 2 6,296 07-27-2021 01:19 AM
Last Post: CAVoIPGirl
  Problem with phones certificate proof 3 10,913 05-26-2020 02:36 PM
Last Post: Lewis-H
  Change certificate on login page HTTPS smartowl 5 14,022 04-20-2020 12:55 PM
Last Post: complex1
  Change SSL certificate for Web Admin Ossiam 6 16,236 05-29-2017 05:10 PM
Last Post: mivk

Forum Jump:

User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication