SSA-148322: WibuKey Denial of Service Vulnerability in PSS(R)SINCAL
PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type. Siemens is actively preparing updates and recommends applicable mitigations for products where patches are currently unavailable.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-84854US | — | — | ||
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be wri… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (5)
- MitigationPSS(R)SINCAL V21.5
Install WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from <a href="https://www.wibu.com/support/user/user-software.html">User Software - Wibu-Systems</a> and follow the installation instructions from WIBU Systems.
- MitigationPSS(R)SINCAL V22.0
Install WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from <a href="https://www.wibu.com/support/user/user-software.html">User Software - Wibu-Systems</a> and follow the installation instructions from WIBU Systems.
- Kein Fix verfügbarPSS(R)SINCAL V21.5
Currently no fix is available
- Kein Fix verfügbarPSS(R)SINCAL V22.0
Currently no fix is available
- BehobenPSS(R)SINCAL V22.5
Update to V22.5 Update 5 or later version
https://www.simtec.cc/en/updates.aspx
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan