High severity7.8NVD Advisory· Published Jul 21, 2017· Updated Jun 17, 2026

CVE-2015-3931

Description

Microsec e-Szigno before 3.2.7.12 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a crafted payload prepended to a valid ds:Object.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsec/E Szigno2 versions
cpe:2.3:a:microsec:e-szigno:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsec:e-szigno:*:*:*:*:*:*:*:*range: <=3.2
- (no CPE)range: <3.2.7.12

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/132473/Microsec-e-Szigno-Netlock-Mokka-XML-Signature-Wrapping.htmlnvdThird Party AdvisoryVDB Entry
www.neih.gov.hunvdThird Party Advisory
www.securityfocus.com/bid/75487nvdThird Party AdvisoryVDB Entry
e-szigno.hu/letoltesek/programok-driverek.htmlnvdVendor Advisory
www.search-lab.hu/about-us/news/107-37-million-digitally-signed-documents-had-to-be-reverifiednvdThird Party Advisory
www.search-lab.hu/eaktanvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000