critical9.8
CVE-2017-11496
Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers t…
Impact
Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gemalto | Sentinel Ldk Rte | Versions 2.10, 3.0, 7.1, 7.50 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/102739
- http://www.securityfocus.com/bid/102906
- https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
- https://ics-cert.kaspersky.com/alerts/2017/07/28/multiple-vulnerabilities-found-in-popular-license-manager/
- https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01
- https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01
- https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx
- http://www.securityfocus.com/bid/102739
- http://www.securityfocus.com/bid/102906
- https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
- https://ics-cert.kaspersky.com/alerts/2017/07/28/multiple-vulnerabilities-found-in-popular-license-manager/
- https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01
- https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01
- https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx