critical10.0
CVE-2018-3991
An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500.
Impact
An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wibu | Wibukey | Version 6.40.2402.500 |
| Siemens | Simatic Wincc Open Architecture | Versions 3.14, 3.15, 3.16 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/107005
- https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-902727.pdf
- https://talosintelligence.com/vulnerability_reports/TALOS-2018-0659
- http://www.securityfocus.com/bid/107005
- https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-902727.pdf
- https://talosintelligence.com/vulnerability_reports/TALOS-2018-0659