ICSA-18-032-03

icsaUScisa_csaf_ot

Gemalto Sentinel License Manager

view advisory published 2018-02-01

ATTENTION: Remotely exploitable/low skill level to exploit.

01

describes (7)

Related CVEs.

IDseverity exploitable
CVE-2017-12822UScritical9.9OT elevated—
Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors.
CVE-2017-12821UScritical9.8—
Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote code execution.
CVE-2017-12820UShigh7.5—
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of…
CVE-2017-12818UShigh7.5—
Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.
CVE-2017-11498UShigh7.5—
Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote proc…
CVE-2017-11497UScritical9.8—
Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary c…
CVE-2017-11496UScritical9.8—
Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary c…
02

references

External citations — patches, advisories, analysis.

03

remediations (7)

  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan