ICSA-19-043-03

icsaUScisa_csaf_ot

WIBU SYSTEMS AG WibuKey Digital Rights Management (Update D)

view advisory published 2019-02-12

Successful exploitation of these vulnerabilities may allow information disclosure, privilege escalation, or remote code execution.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2018-3991UScritical9.8—
An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can caus…
CVE-2018-3990UShigh7.8—
An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400). A specially crafted IRP req…
CVE-2018-3989USmedium5.5—
An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400).A specially crafted…
02

references

External citations — patches, advisories, analysis.

03

remediations (27)

  • FixedCOPA-DATA straton workbench

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedCOPA-DATA straton workbench

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedCOPA-DATA straton workbench

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedCOPA-DATA zenon products

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedCOPA-DATA zenon products

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedCOPA-DATA zenon products

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedPhoenix Contact MEVIEW3

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedPhoenix Contact MEVIEW3

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedPhoenix Contact MEVIEW3

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SICAM 230

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SICAM 230

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SICAM 230

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SIMATIC WinCC OA 3.14

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SIMATIC WinCC OA 3.14

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SIMATIC WinCC OA 3.14

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SIMATIC WinCC OA 3.15

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SIMATIC WinCC OA 3.15

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SIMATIC WinCC OA 3.15

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SIMATIC WinCC OA 3.16

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SIMATIC WinCC OA 3.16

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SIMATIC WinCC OA 3.16

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SISHIP EMCS IMAC IPMS

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SISHIP EMCS IMAC IPMS

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSiemens SISHIP EMCS IMAC IPMS

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSprecher Automation SPRECON-V460 products

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSprecher Automation SPRECON-V460 products

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

  • FixedSprecher Automation SPRECON-V460 products

    CERT@VDE has also published an advisory for the Phoenix Contact MEVIEW3 at the following link:

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan