Advisories

The following is a list of all publicly disclosed vulnerabilities discovered by Kaspersky ICS CERT researchers. While the affected vendor is working on a patch for these vulnerabilities, Kaspersky customers are protected from exploitation by security filters delivered ahead of public disclosure. Once the vendor patches the vulnerability, we publish an accompanying security advisory, which describes the issue, including links to the vendor’s fixes.

Filter

09 February 2018

CVE-2018-6292

KLCERT-18-001

KLCERT-18-001: Saperion webclient multiple vulnerabilities: Remote Code Execution with system user privileges in Saperion web client

02 October 2017

CVE-2017-12822

KLCERT-17-008

KLCERT-17-008: Sentinel LDK RTE: Remote enabling and disabling admin interface

02 October 2017

CVE-2017-12821

KLCERT-17-007

KLCERT-17-007: Sentinel LDK RTE: Memory corruption might cause remote code execution

02 October 2017

CVE-2017-12820

KLCERT-17-006

KLCERT-17-006: Sentinel LDK RTE: Arbitrary memory read from controlled memory pointer leads to remote denial of service

02 October 2017

CVE-2017-12819

KLCERT-17-005

KLCERT-17-005: Sentinel LDK RTE: Remote manipulations with language pack updater lead to NTLM-relay attack for system user

02 October 2017

CVE-2017-12818

KLCERT-17-004

KLCERT-17-004: Sentinel LDK RTE: Stack overflow in custom XML-parser leads to remote denial of service

28 July 2017

CVE-2017-11496

KLCERT-17-003

KLCERT-17-003: Sentinel LDK RTE: malformed ASN1 streams in V2C files lead to Remote Code Execution

28 July 2017

CVE-2017-11497

KLCERT-17-002

KLCERT-17-002: Sentinel LDK RTE: language packs containing malformed filenames lead to Remote Code Execution

28 July 2017

CVE-2017-11498

KLCERT-17-001

KLCERT-17-001: Sentinel LDK RTE: language pack with invalid HTML files leads to Denial of Service

12

Select a date

Search by vendor

Materials

Advisories RSS feed

Back to top

Select a date

Search by vendor

Filter