Summary
PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type.
Siemens is actively preparing updates and recommends applicable mitigations for products where patches are currently unavailable.
Vulnerabilities 1
-
High 7.0
Out of Bound Write on WibuKey for Windows
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under…
Revision history
-
#1
Publication Date
References
-
SSA-148322: WibuKey Denial of Service Vulnerability in PSS(R)SINCAL - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-148322.html