CVE-2017-12821

Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote code execution.

Score

CVSS 3.0 9.8 Critical

Status

Modified - vulnerability@kaspersky.com

Published

2017-10-04

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Gemaltos Hasp Srm (Gemalto)
• Sentinel Hasp And Sentinel Ldk Products Prior To Sentinel Ldk Rte (Gemalto)
• Sentinel Ldk Rte Firmware (Sentinel)

References

• http://www.securityfocus.com/bid/102906
• https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-007-sentinel-ldk-rte-memory-corruption…
• https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01