CVEvulnerability
CVE-2017-12822
9.9 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-10-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.9 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-306
Description
Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors.
Affected configurations
• sentinel sentinel ldk rte firmware (<= 7.50)
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- http://www.securityfocus.com/bid/102906 www.securityfocus.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf cert-portal.siemens.com
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-and-disabling-admin-interface/ Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 ics-cert.us-cert.gov
- http://www.securityfocus.com/bid/102906 www.securityfocus.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf cert-portal.siemens.com
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-and-disabling-admin-interface/ Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 ics-cert.us-cert.gov