Lucene search

[email protected]NVD:CVE-2017-12822

HistoryOct 04, 2017 - 1:29 a.m.

CVE-2017-12822

2017-10-0401:29:02

CWE-306

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

JSON

Remote enabling and disabling admin interface in Gemalto’s HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors.

Affected configurations

NVD

Node

sentinelsentinel_ldk_rte_firmwareRange≤7.50

References

www.securityfocus.com/bid/102906

cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf

ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-and-disabling-admin-interface/

ics-cert.us-cert.gov/advisories/ICSA-18-093-01

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

JSON

Related for NVD:CVE-2017-12822

prion1 cvelist1 cve1 ics4