VULNERABILITY INTELLIGENCE

CVE-2017-10669

CVSS score6.5 MEDIUM

EPSS probability0.49%

CISA KEVNot currently listed

Published2017-06-30

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must send crafted protocol messages with duplicate IDs.

Weakness classification

CWE-347: Improper Verification of Cryptographic Signature

Primary references

cve@mitre.org — Mailing List, Third Party Advisory
nvd@nist.gov — Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory