CVE-2017-11497

Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via language packs containing filenames longer than 1024 characters.

• CWE-119

• http://www.securityfocus.com/bid/102739
• http://www.securityfocus.com/bid/102906
• https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
• https://ics-cert.kaspersky.com/advisories/2017/07/28/klcert-17-002-sentinel-ldk-rte-language-packs-containing-malformed-filenames-lead-to-remote-code-execution/Third Party Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01
• https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01
• https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptxThird Party Advisory
• http://www.securityfocus.com/bid/102739
• http://www.securityfocus.com/bid/102906
• https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
• https://ics-cert.kaspersky.com/advisories/2017/07/28/klcert-17-002-sentinel-ldk-rte-language-packs-containing-malformed-filenames-lead-to-remote-code-execution/Third Party Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01
• https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01
• https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptxThird Party Advisory

Published

Oct 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11491Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-11492Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-11493Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-11494SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.…
• CVE-2017-11495PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow una…
• CVE-2017-11496Stack buffer overflow in hasplms in Gemalto ACC (Admin Contr…
• CVE-2017-11498Buffer overflow in hasplms in Gemalto ACC (Admin Control Cen…
• CVE-2017-11499Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 thro…
• CVE-2017-1150IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Se…
• CVE-2017-11500A directory traversal vulnerability exists in MetInfo 5.3.17…7.5
• CVE-2017-11501NixOS 17.03 and earlier has an unintended default absence of…
• CVE-2017-11502Technicolor DPC3928AD DOCSIS devices allow remote attackers …