CVE-2017-10669

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-06-30 · updated 2026-06-17
Weakness: CWE-347

Description

Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must send crafted protocol messages with duplicate IDs.

Affected products

Xoev Osci Transport Library: 1.6, 1.6.1

References

http://seclists.org/fulldisclosure/2017/Jun/44
http://blog.sec-consult.com/2017/06/german-e-government-details-vulnerabilities.html
http://seclists.org/fulldisclosure/2017/Jun/44

Get alerted when CVE-2017-10669 or the next vulnerability affects your stack