Lucene search

MitreCVE-2024-45181

HistorySep 12, 2024 - 7:15 p.m.

CVE-2024-45181

2024-09-1219:15:03

CWE-787

CWE-119

mitre

web.nvd.nist.gov

wibukey64 vulnerability

arbitrary address write

kernel memory corruption

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

Percentile

9.6%

JSON

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an arbitrary address write, resulting in kernel memory corruption.

Affected configurations

Nvd

Node

wibuwibukeyRange<6.70

AND

microsoftwindowsMatch-

VendorProductVersionCPE
wibuwibukey*cpe:2.3:a:wibu:wibukey:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wibu	wibukey	*	cpe:2.3:a:wibu:wibukey::::::::
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*

References

cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-94453.pdf

wibu.com

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

Percentile

9.6%

JSON

Related for CVE-2024-45181