PatchTheCVECVE-2018-8900: The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.8
CVE-2018-8900 is a medium-severity flaw (CVSS 6.1) affecting sentinel ldk rte. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center (ACC) for cross-site scripting (XSS) vulnerability.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.1 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.8% (top 45%) |
| CISA exploited list | No |
| Weakness | CWE-79 |
| Published | 2018-05-02 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2018-8900?
sentinel ldk rte: upgrade to 7.80. Exact commands for each OS are on this page.
Is CVE-2018-8900 being exploited?
CVE-2018-8900 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2018-8900 affect?
CVE-2018-8900 affects sentinel ldk rte. Severity is medium (CVSS 6.1). The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center (ACC) for cross-site scripting (
How urgent is CVE-2018-8900?
Priority 35/100. No elevated risk signals yet.
Related CVEs
- CVE-2018-6305 HIGH 7.5 UPGRADE Denial of service in Gemalto's Sentinel LDK RTE version before 7.65
- CVE-2018-6304 HIGH 7.5 UPGRADE Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial o
- CVE-2017-11498 HIGH 7.5 DOWNGRADE Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to S
- CVE-2017-11497 CRITICAL 9.8 DOWNGRADE Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.1
- CVE-2017-11496 CRITICAL 9.8 DOWNGRADE Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.1