CVE-2017-6911

Published: Mar 23, 2017Modified: May 13, 2026

6.6

Vector

CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.7 / Impact: 5.9

Source: NVD

Description

USB Pratirodh is prone to sensitive information disclosure. It stores sensitive information such as username and password in simple usb.xml. An attacker with physical access to the system can modify the file according his own requirements that may aid in further attack.

Affected (1)

Products: Usb Pratirodh Project: Usb Pratirodh

Usb Pratirodh Project

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Usb Pratirodh Project Usb Pratirodh	All versions

Related CWEs

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (8)

http://packetstormsecurity.com/files/141651/USB-Pratirodh-Insecure-Password-Storage.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2017/Mar/43

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/540289/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/96970

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/141651/USB-Pratirodh-Insecure-Password-Storage.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2017/Mar/43

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/540289/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/96970

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.