CVE-2021-32928

9.8 criticalEPSS 1.2%

Critical (9.8) in thalesgroup sentinel ldk run-time environment. EPSS 1.2% chance of exploitation in the next 30 days.

The Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-459
Published: 2021-06-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

thalesgroup:sentinel_ldk_run-time_environment

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-159-06
https://us-cert.cisa.gov/ics/advisories/icsa-21-159-06

Check your stack JSON