CVE-2017-11498

Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process (a denial of service) via a language pack (ZIP file) with invalid HTML files.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-10-03

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Sentinel Ldk Rte (Gemalto)

References

• http://www.securityfocus.com/bid/102739
• http://www.securityfocus.com/bid/102906
• https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
• https://ics-cert.kaspersky.com/advisories/2017/07/28/klcert-17-001-sentinel-ldk-rte-language-pack-with-invalid-html-fil…
• https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01
• https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01
• https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx