CVE-2017-10669 - CVE House
Back to Database
Status published Medium CVE-2017-10669

Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI...

Vulnerability Description

Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must send crafted protocol messages with duplicate IDs.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-10669

Credits & Attribution

No credits recorded in the NVD database.

References

More from xoev

View All →
CVE-2017-10670
An XML External Entity (XXE) issue exists in OSCI-Transport 1.2...
Critical 9.8
CVE-2017-10668
A Padding Oracle exists in OSCI-Transport 1.2 as used in...
Medium 5.9

Affected Vendor

Affected Software

osci transport library
Vulnerable Versions:
1.6, 1.6.1

Timeline

Official Publish: June 30th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.