CVE-2017-10668 - CVE House
Back to Database
Status published Medium CVE-2017-10668

A Padding Oracle exists in OSCI-Transport 1.2 as used in...

Vulnerability Description

A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). Under an MITM condition within the OSCI infrastructure, an attacker needs to send crafted protocol messages to analyse the CBC mode padding in order to decrypt the transport encryption.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-10668

Credits & Attribution

No credits recorded in the NVD database.

References

More from xoev

View All →
CVE-2017-10670
An XML External Entity (XXE) issue exists in OSCI-Transport 1.2...
Critical 9.8
CVE-2017-10669
Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI...
Medium 6.5

Affected Vendor

Affected Software

osci transport library
Vulnerable Versions:
1.6, 1.6.1

Timeline

Official Publish: June 30th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.