9.9crit
CVE-2017-12822
Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE vers…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
9.9
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.2%
percentile 67%
Public exploits
0
none known
Summary
Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors.
Exploit prediction (EPSS)
1.17% probability of exploitation in the next 30 days, higher than 67% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.9 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- Gemalto Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
Classification
- Weakness
- CWE-306 Missing Authentication for Critical Functionality
References
- ics-cert.kaspersky.com /advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-an · x_refsource_MISC, x_transferred
- ics-cert.us-cert.gov /advisories/ICSA-18-093-01 · x_refsource_MISC, x_transferred
- cert-portal.siemens.com /productcert/pdf/ssa-727467.pdf · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/102906 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-12822
- NVD: CVE-2017-12822
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.