CVE-2017-12819

2017-10-0200:00:00

Kaspersky

www.cve.org

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.4%

JSON

Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto’s HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55.

CNA Affected

[
  {
    "product": "Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE",
    "vendor": "Gemalto",
    "versions": [
      {
        "status": "affected",
        "version": "7.55"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf

ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-005-sentinel-ldk-rte-remote-manipulations-with-language-pack-updater-lead-to-ntlm-relay-attack-for-system-user/

ics-cert.us-cert.gov/advisories/ICSA-18-093-01