CVE-2017-12820: vulnerability in Gemalto's HASP SRM, Sentinel HASP and Sentinel…
Published · Updated
Follow this CVE+ Monitor Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.7%
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.
Affected products
Gemalto · Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTERelated CVEs — Gemalto's HASP SRM, Sentinel HASP and Sentinel…
In the same product, most dangerous first.
References
https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdfhttps://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-006-sentinel-ldk-rte-arbitrary-memory-read-from-controlled-memory-pointer-leads-to-remote-denial-of-service/https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01http://www.securityfocus.com/bid/102906