CVE-2017-12820
HighSummary
In Gemalto's HASP SRM, Sentinel HASP, and Sentinel LDK products prior to version 7.55 RTE, there is a vulnerability that allows arbitrary memory read from a controlled memory pointer, leading to remote denial of service.
Risk Assessment
This vulnerability could be exploited by an attacker to trigger a remote denial of service, potentially impacting the availability of services within the organization.
Recommendation
It is recommended to upgrade to Sentinel LDK RTE version 7.55 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Gemalto HASP SRM, Sentinel HASP, Sentinel LDK
See all- CVE-2017-12818High
Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.
- CVE-2017-12822Critical
In Gemalto's HASP SRM, Sentinel HASP, and Sentinel LDK products prior to version 7.55 RTE, there is a remote capability to enable and disable the admin interface, leading to new attack vectors.
- CVE-2017-12821Critical
Memory corruption in Gemalto's HASP SRM, Sentinel HASP, and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 may lead to remote code execution.
- CVE-2017-12819Critical
Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55.
Original NVD description (English source)
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.