PT-2017-12711 · Gemalto · Sentinel Ldk Rte+3

Published 2017-10-03 · Updated 2018-05-11 · CVE-2017-12821

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sentinel LDK versions prior to 7.55 HASP SRM versions prior to 7.55 Sentinel HASP versions prior to 7.55

Description The issue is related to memory corruption in Gemalto's products, which might lead to remote code execution.

Recommendations For versions prior to 7.55, update to Sentinel LDK RTE version 7.55 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected products until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-12821

Affected Products

Hasp Srm

Sentinel Hasp

Sentinel Ldk

Sentinel Ldk Rte

References · 6

• https://osv.dev/vulnerability/CVE-2017-12821 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12821 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf · Note
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-007-sentinel-ldk-rte-memory-corruption-might-cause-remote-code-execution · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 · Note
• http://securityfocus.com/bid/102906 · Note