diff --git a/CHANGELOG b/CHANGELOG
index 3c0d04a41..206af4e8d 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -5,9 +5,9 @@ o [NSE] Added 9 new fingerprints for script http-default-accounts.
   Schneider controller, Xerox printer, Citrix NetScaler, ESXi hypervisor)
   [nnposter]
 
-o [NSE] Fixed a bug in ssl-enum-ciphers which caused it to not output TLSv1.2
-  info with DHE ciphersuites or others involving ServerKeyExchange messages.
-  [Daniel Miller]
+o [NSE] Fixed a bug in ssl-enum-ciphers and ssl-dh-params which caused them to
+  not output TLSv1.2 info with DHE ciphersuites or others involving
+  ServerKeyExchange messages. [Daniel Miller]
 
 o [NSE] Added oracle-tns-version to decode the version number from Oracle
   Database Server's TNS listener. [Daniel Miller]
diff --git a/scripts/ssl-dh-params.nse b/scripts/ssl-dh-params.nse
index ada7fb041..a5493314a 100644
--- a/scripts/ssl-dh-params.nse
+++ b/scripts/ssl-dh-params.nse
@@ -672,7 +672,7 @@ local function get_dhe_params(host, port, protocol, ciphers)
     -- Only try next chunk if current chunk was rejected
     if cipher and packed then
       local info = tls.cipher_info(cipher)
-      local data = tls.KEX_ALGORITHMS[info.kex].server_key_exchange(packed)
+      local data = tls.KEX_ALGORITHMS[info.kex].server_key_exchange(packed, protocol)
       return cipher, data.dhparams
     end
   end