What is CVE-2017-12822?

CVE-2017-12822 is a critical-severity vulnerability in Gemalto Gemalto's Hasp Srm, Sentinel And Ldk Products Prior To Rte, classified under Missing Authentication for Critical Function. CVSS score: 9.9/10. Published 2017-10-04.

How severe is CVE-2017-12822?

Critical severity. CVSS v3 base score is 9.9 out of 10.

Auth bypass in Gemalto Gemalto's Hasp Srm, Sentinel And Ldk Products Prior To Rte

CVE-2017-12822

Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors.

Vulnerability class: Broken Authentication

Published 2017-10-04 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L.

EPSS exploit prediction

EPSS: 0.012 (66.1th percentile), scored 2026-09-30.

Low probability of exploitation in the next 30 days, but still tracked. 66th percentile — 66.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.012 · newest: 0.012 · change: 0.000

Affected products

Gemalto Gemalto's Hasp Srm, Sentinel And Ldk Products Prior To Rte — versions 7.55
Sentinel Ldk Rte Firmware

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-se… (Third Party Advisory)
ics-cert.us-cert.gov/advisories/ICSA-18-093-01
cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
www.securityfocus.com/bid/102906 (vdb-entry)

Frequently asked questions

What is CVE-2017-12822?: CVE-2017-12822 is a critical-severity vulnerability in Gemalto Gemalto's Hasp Srm, Sentinel And Ldk Products Prior To Rte, classified under Missing Authentication for Critical Function. CVSS score: 9.9/10. Published 2017-10-04.
How severe is CVE-2017-12822?: Critical severity. CVSS v3 base score is 9.9 out of 10.