CVE-2017-12818

2017-10-0200:00:00

Kaspersky

www.cve.org

7.6 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.3%

JSON

Stack overflow in custom XML-parser in Gemalto’s HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.

CNA Affected

[
  {
    "product": "Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE",
    "vendor": "Gemalto",
    "versions": [
      {
        "status": "affected",
        "version": "7.55"
      }
    ]
  }
]

References

www.securityfocus.com/bid/102906

cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf

ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-004-sentinel-ldk-rte-stack-overflow-in-custom-xml-parser-leads-to-remote-denial-of-service/

ics-cert.us-cert.gov/advisories/ICSA-18-093-01