CVE-2017-10669

MEDIUM 6.5CVE-2017-10669 · Published 30/06/2017 · updated 17/06/2026

In short

CVE-2017-10669 is a MEDIUM (CVSS 6.5) vulnerability affecting osci transport library (xoev).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
osci transport library xoev	`= 1.6= 1.6.1`	No fix yet

Description

Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must send crafted protocol messages with duplicate IDs.

References

seclists.org/fulldisclosure/2017/Jun/44 · Mailing List
blog.sec-consult.com/2017/06/german-e-government-details-vulnerabilities.html · Technical Description

More vulnerabilities in osci transport library

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free