CVE-2017-12821 - Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote code execution

Back Back to CVE browser

CRITICAL

Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote code execution

Published Oct 3, 2017

9.8

CRITICAL

CVSS 3.0

EPSS 2.91%

Description

Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote code execution.

Affected products

Vendor Gemalto Product n/a Default
n/a
- Version
  7.55
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Gemalto

n/a

Version	Status	Constraints
7.55	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (4)

http://www.securityfocus.com/bid/102906
vdb-entryx_refsource_BID
https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
x_refsource_CONFIRM
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-007-sentinel-ldk-rte-memory-corruption-might-cause-remote-code-execution/
x_refsource_MISCThird Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01
x_refsource_MISC

Link	Providers	Tags
http://www.securityfocus.com/bid/102906		vdb-entryx_refsource_BID
https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf		x_refsource_CONFIRM
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-007-sentinel-ldk-rte-memory-corruption-might-cause-remote-code-execution/		x_refsource_MISCThird Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01		x_refsource_MISC

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Kaspersky

Published Oct 3, 2017

Updated Sep 17, 2024

Reserved Aug 11, 2017

Link CVE-2017-12821

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-12821

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-12821