Back to CVE Browser

CVE-2017-12819

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0970%

EPSS Percentile11.14th

PublishedOct 4, 2017

Last ModifiedMay 13, 2026

Vulnerability Description

Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55.

Affected Platforms (CPE)

💻

Sentinel

Sentinel Ldk Rte Firmware

<= 7.50

References & Advisories

🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf

🔗 https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-005-sentinel-ldk-rte-remote-manipulations-with-language-pack-updater-lead-to-ntlm-relay-attack-for-system-user/

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01

🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf

🔗 https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-005-sentinel-ldk-rte-remote-manipulations-with-language-pack-updater-lead-to-ntlm-relay-attack-for-system-user/

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01

Related Vulnerabilities

CVE-2017-632610.0

The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual ...

CVE-2017-1091210.0

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217.

CVE-2017-308810.0

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine. S...

CVE-2017-1092010.0

The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a G...