CVE-2017-10669 Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must...
MediumCVSS 6.5
EPSS 0.49%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must send crafted protocol messages with duplicate IDs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xoev osci transport library | = 1.6 | No fix listed |
| xoev osci transport library | = 1.6.1 | No fix listed |
References
- seclists.org mailing-list third-party-advisory
- blog.sec-consult.com technical-description third-party-advisory