Skip to content
OpenAdvisories
Critical ICSA-19-043-03 3 CVEs

WIBU SYSTEMS AG WibuKey Digital Rights Management (Update D)

Published Feb 12, 2019 · Updated May 14, 2019 · Revision 5

Vendor: Wibu Product: COPA-DATA straton workbench Product: COPA-DATA zenon products Product: Phoenix Contact MEVIEW3 Product: Siemens SICAM 230 Product: Siemens SIMATIC WinCC OA 3.14 Product: Siemens SIMATIC WinCC OA 3.15 Product: Siemens SIMATIC WinCC OA 3.16 Product: Siemens SISHIP EMCS IMAC IPMS Product: Sprecher Automation SPRECON-V460 products

Summary

Successful exploitation of these vulnerabilities may allow information disclosure, privilege escalation, or remote code execution.

Vulnerabilities 3

  • Critical 10.0
    CVE-2018-3991 EPSS 34%

    An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, v…

  • Critical 9.3
    CVE-2018-3990

    An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuK…

  • Medium 4.3
    CVE-2018-3989

    An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYST…

Revision history

  1. #5

    ICSA-19-043-03 WIBU SYSTEMS AG WibuKey Digital Rights Management (Update D)

  2. #4

    ICSA-19-043-03 WIBU SYSTEMS AG WibuKey Digital Rights Management (Update C)

  3. #3

    ICSA-19-043-03 WIBU-SYSTEMS AG WibuKey Digital Rights Management (Update B)

  4. #2

    ICSA-19-043-03 Siemens Licensing Software for SICAM 230 (Update A)

  5. #1

    ICSA-19-043-03 Siemens Licensing Software for SICAM 230

References