ICSA-18-032-03

icsaUScisa_csaf_ot

Gemalto Sentinel License Manager

Advisory ansehen veröffentlicht 2018-02-01

ATTENTION: Remotely exploitable/low skill level to exploit.

01

beschreibt (7)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2017-12822UScritical9.9OT erhöht—
Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors.
CVE-2017-12821UScritical9.8—
Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote code execution.
CVE-2017-12820UShigh7.5—
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of…
CVE-2017-12818UShigh7.5—
Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.
CVE-2017-11498UShigh7.5—
Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote proc…
CVE-2017-11497UScritical9.8—
Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary c…
CVE-2017-11496UScritical9.8—
Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary c…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (7)

  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
  • MitigationAll HASP SRM Sentinel HASP and Sentinel LDK

    Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017

    https://sentinelcustomer.gemalto.com/sentineldownloads/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan