WibuKey Network Server Management Heap Overflow (CVE-2018-3991)

A heap overflow vulnerability exists in WibuKey Network Server Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

WIBU SYSTEMS AG WibuKey Digital Rights Management (Update B)

1. EXECUTIVE SUMMARY CVSS v3 10.0 --------- Begin Update B Part 1 of 4 --------- ATTENTION: Exploitable remotely/low skill level to exploit/public exploits available Vendor: WIBU-SYSTEMS AG Equipment: WibuKey Digital Rights Management DRM --------- End Update B Part 1 of 4 ---------...

Siemens Warns of Critical Remote-Code Execution ICS Flaw

Siemens has released 16 security advisories for various industrial control and utility products, including a warning for a critical flaw in the WibuKey digital rights management DRM solution that affects the SICAM 230 process control system. SICAM 230 is used for a broad range of industrial contr...

CVE-2018-3991

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigg...

CVE-2018-3991

The CVE-2018-3991 vulnerability is a heap-based overflow in WIBU-SYSTEMS WibuKey Network server management (WkbProgramLow function) affecting versions around 6.40.2402.500. A specially crafted TCP packet to port 22347/TCP can trigger the overflow, potentially enabling remote code execution. Mitig...

CVE-2018-3991

creationtimestamp| type| source ---|---|--- 2019-01-29 15:18:08+00:00| seen| MISP/5c506cbf-3024-4583-b874-2d460a021402 2019-02-23 08:16:50+00:00| published-proof-of-concept| https://t.me/icscert/81...