CVE-2017-12822

Опубликовано: 04 окт. 2017

Источник: nvd

CVSS3: 9.9

CVSS2: 7.5

EPSS Низкий

Описание

Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors.

Ссылки

http://www.securityfocus.com/bid/102906
https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-and-disabling-admin-interface/
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01
http://www.securityfocus.com/bid/102906
https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-and-disabling-admin-interface/
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:sentinel:sentinel_ldk_rte_firmware:*:*:*:*:*:*:*:*

Версия до 7.50 (включая)

EPSS

Процентиль: 56%

0.00337

Низкий

9.9 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-306

Связанные уязвимости

GHSA-c3pj-r4qh-qfcr