CVE-2017-10669

6.5 mediumEPSS 0.5%

Medium (6.5) in xoev osci transport library. EPSS 0.5% chance of exploitation in the next 30 days.

Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must send crafted protocol messages with duplicate IDs.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-347
Published: 2017-06-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xoev:osci_transport_library

References

http://seclists.org/fulldisclosure/2017/Jun/44
http://blog.sec-consult.com/2017/06/german-e-government-details-vulnerabilities.html
http://seclists.org/fulldisclosure/2017/Jun/44

Check your stack JSON