critical9.8
CVE-2017-6895
USB Pratirodh allows remote attackers to conduct XML External Entity (XXE) attacks via XML data in usb.xml.
Impact
USB Pratirodh allows remote attackers to conduct XML External Entity (XXE) attacks via XML data in usb.xml.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Usb Pratirodh Project | Usb Pratirodh | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/141652/USB-Pratirodh-XXE-Injection.html
- http://seclists.org/fulldisclosure/2017/Mar/42
- http://www.securityfocus.com/bid/96936
- https://secur1tyadvisory.wordpress.com/2017/03/15/usb-pratirodh-xml-external-entity-injection-vulnerability/
- http://packetstormsecurity.com/files/141652/USB-Pratirodh-XXE-Injection.html
- http://seclists.org/fulldisclosure/2017/Mar/42
- http://www.securityfocus.com/bid/96936
- https://secur1tyadvisory.wordpress.com/2017/03/15/usb-pratirodh-xml-external-entity-injection-vulnerability/