CVEブラウザに戻る

CVE-2017-12820

HIGH

7.5

CVSS Severity Score

EPSS Score0.0700%

EPSS Percentile1.32th

Published2017年10月4日

Last Modified2026年5月13日

Vulnerability Description

Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.

Affected Platforms (CPE)

💻

Sentinel

Sentinel Ldk Rte Firmware

<= 7.50

References & Advisories

🔗 http://www.securityfocus.com/bid/102906

🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf

🔗 https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-006-sentinel-ldk-rte-arbitrary-memory-read-from-controlled-memory-pointer-leads-to-remote-denial-of-service/

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01

🔗 http://www.securityfocus.com/bid/102906

🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf

🔗 https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-006-sentinel-ldk-rte-arbitrary-memory-read-from-controlled-memory-pointer-leads-to-remote-denial-of-service/

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01

関連する脆弱性情報

CVE-2017-379110.0

A vulnerability in the web-based GUI of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication ...

CVE-2017-514510.0

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. S...

CVE-2017-332410.0

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcompone...

CVE-2017-278510.0

An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially cra...