Lucene search

K
nvd[email protected]NVD:CVE-2024-45181
HistorySep 12, 2024 - 7:15 p.m.

CVE-2024-45181

2024-09-1219:15:03
CWE-119
CWE-787
web.nvd.nist.gov
5
wibukey64.sys
crafted packets
kernel memory corruption
improper bounds check
wibukey

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.6%

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an arbitrary address write, resulting in kernel memory corruption.

Affected configurations

Nvd
Node
wibuwibukeyRange<6.70
AND
microsoftwindowsMatch-
VendorProductVersionCPE
wibuwibukey*cpe:2.3:a:wibu:wibukey:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.6%

Related for NVD:CVE-2024-45181