CVE-2017-6895

USB Pratirodh allows remote attackers to conduct XML External Entity (XXE) attacks via XML data in usb.xml.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.02% chance of exploitation in the next 30 days, 86th percentile

Published

2017-03-23

Updated

2024-08-05

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/141652/USB-Pratirodh-XXE-Injection.html
• http://seclists.org/fulldisclosure/2017/Mar/42
• https://secur1tyadvisory.wordpress.com/2017/03/15/usb-pratirodh-xml-external-entity-injec…

References

• CVE Record
• NVD entry

Related

• CVE-2017-6884
• CVE-2017-6896
• CVE-2017-6880
• CVE-2017-6900
• CVE-2017-6878
• CVE-2017-6908