CVE-2017-12822: vulnerability in Gemalto's HASP SRM, Sentinel HASP and Sentinel…
Published · Updated
Follow this CVE+ Monitor Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.2%
Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors.
Affected products
Gemalto · Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTERelated CVEs — Gemalto's HASP SRM, Sentinel HASP and Sentinel…
In the same product, most dangerous first.
References
https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdfhttps://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-and-disabling-admin-interface/https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01http://www.securityfocus.com/bid/102906