Back to CVE Browser

CVE-2017-12822

CRITICAL

9.9

CVSS Severity Score

EPSS Score0.1210%

EPSS Percentile18.85th

PublishedOct 4, 2017

Last ModifiedMay 13, 2026

Vulnerability Description

Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors.

Affected Platforms (CPE)

💻

Sentinel

Sentinel Ldk Rte Firmware

<= 7.50

References & Advisories

🔗 http://www.securityfocus.com/bid/102906

🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf

🔗 https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-and-disabling-admin-interface/

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01

🔗 http://www.securityfocus.com/bid/102906

🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf

🔗 https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-and-disabling-admin-interface/

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01

Related Vulnerabilities

CVE-2017-1129110.0

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists tha...

CVE-2017-1674010.0

A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 2...

CVE-2017-1437810.0

EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, ak...

CVE-2017-1254210.0

A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found...