CVE-2017-12822 Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors.
CriticalCVSS 9.9
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sentinel ldk rte firmware | <= 7.50 | No fix listed |
| Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE | = 7.55 | No fix listed |
References
- 102906 vdb-entry
- cert-portal.siemens.com
- ics-cert.kaspersky.com third-party-advisory
- ics-cert.us-cert.gov