PT-2017-17410 · Unknown · Usb Pratirodh

Sachin Wagh + 1 · Published 2017-03-23 · Updated 2019-10-03 · CVE-2017-6911

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions USB Pratirodh (affected versions not specified)

Description The issue concerns the disclosure of sensitive information. Specifically, it stores sensitive data such as username and password in a simple usb.xml file. An attacker with physical access to the system can modify this file to suit their needs, potentially aiding in further attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2017-6911

Affected Products

Usb Pratirodh

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-6911 · Security Note
• http://seclists.org/fulldisclosure/2017/Mar/43 · Note
• http://securityfocus.com/bid/96970 · Note
• http://packetstormsecurity.com/files/141651/USB-Pratirodh-Insecure-Password-Storage.html · Note
• http://securityfocus.com/archive/1/540289/100/0/threaded · Note