SSA-148322: WibuKey Denial of Service Vulnerability in PSS(R)SINCAL
PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type. Siemens is actively preparing updates and recommends applicable mitigations for products where patches are currently unavailable.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-84854US | — | — | ||
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be wri… | ||||
references
External citations — patches, advisories, analysis.
remediations (5)
- MitigationPSS(R)SINCAL V21.5
Install WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from <a href="https://www.wibu.com/support/user/user-software.html">User Software - Wibu-Systems</a> and follow the installation instructions from WIBU Systems.
- MitigationPSS(R)SINCAL V22.0
Install WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from <a href="https://www.wibu.com/support/user/user-software.html">User Software - Wibu-Systems</a> and follow the installation instructions from WIBU Systems.
- No fix availablePSS(R)SINCAL V21.5
Currently no fix is available
- No fix availablePSS(R)SINCAL V22.0
Currently no fix is available
- FixedPSS(R)SINCAL V22.5
Update to V22.5 Update 5 or later version
https://www.simtec.cc/en/updates.aspx
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan