CVEvulnerability
CVE-2017-12820
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-10-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.
Affected configurations
• sentinel sentinel ldk rte firmware (<= 7.50)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/102906 www.securityfocus.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf cert-portal.siemens.com
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-006-sentinel-ldk-rte-arbitrary-memory-read-from-controlled-memory-pointer-leads-to-remote-denial-of-service/ Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 ics-cert.us-cert.gov
- http://www.securityfocus.com/bid/102906 www.securityfocus.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf cert-portal.siemens.com
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-006-sentinel-ldk-rte-arbitrary-memory-read-from-controlled-memory-pointer-leads-to-remote-denial-of-service/ Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 ics-cert.us-cert.gov