CVE-2017-11497

Description

References

• securityfocus.com/bid/102739
• securityfocus.com/bid/102906
• cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
• ics-cert.kaspersky.com/advisories/2017/07/28/klcert-17-002-sentinel-ldk-rte-language-packs-containing-malformed-filenames-lead-to-remote-code-execution · Third Party Advisory
• ics-cert.us-cert.gov/advisories/ICSA-18-018-01
• ics-cert.us-cert.gov/advisories/ICSA-18-093-01
• iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx · Third Party Advisory

More vulnerabilities in sentinel ldk rte

• CVE-2018-8900MEDIUM 6.1The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to i…
• CVE-2018-6305HIGH 7.5Denial of service in Gemalto's Sentinel LDK RTE version before 7.65
• CVE-2018-6304HIGH 7.5Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial of service
• CVE-2017-11498HIGH 7.5Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remot…
• CVE-2017-11496CRITICAL 9.8Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows…