Vulnerability Details CVE-2017-6911
USB Pratirodh is prone to sensitive information disclosure. It stores sensitive information such as username and password in simple usb.xml. An attacker with physical access to the system can modify the file according his own requirements that may aid in further attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.4%
CVSS Severity
CVSS v3 Score 6.6
CVSS v2 Score 2.1
References
- http://packetstormsecurity.com/files/141651/USB-Pratirodh-Insecure-Password-Storage.html
- http://seclists.org/fulldisclosure/2017/Mar/43
- http://www.securityfocus.com/archive/1/540289/100/0/threaded
- http://www.securityfocus.com/bid/96970
- http://packetstormsecurity.com/files/141651/USB-Pratirodh-Insecure-Password-Storage.html
- http://seclists.org/fulldisclosure/2017/Mar/43
- http://www.securityfocus.com/archive/1/540289/100/0/threaded
- http://www.securityfocus.com/bid/96970
Products affected by CVE-2017-6911
-
cpe:2.3:a:usb_pratirodh_project:usb_pratirodh:-