CVE-2017-12820
HIGHSentinel LDK RTE < 7.55 - Remote Denial of Service via Controlled Memory Pointer
Title source: llmDescription
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.
References (4)
Core 4
Core References
Third Party Advisory x_refsource_misc
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-006-sentinel-ldk-rte-arbitrary-memory-read-from-controlled-memory-pointer-leads-to-remote-denial-of-service/
Various Sources x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01
Vendor Advisory x_refsource_confirm
https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/102906
Scores
CVSS v3
7.5
EPSS
0.0168
EPSS Percentile
74.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-119
Status
published
Products (2)
Gemalto/Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
7.55
sentinel/sentinel_ldk_rte_firmware
< 7.50
Published
Oct 04, 2017
Tracked Since
Feb 18, 2026