Summary
Several Siemens products (optionally) offer the use of WibuKey Dongles [1] for licensing.
According to a recent publication by WIBU Systems (WIBU-94453 at [2]), the Windows device driver for these Dongles contains vulnerabilities as listed below.
- [1] https://www.wibu.com/products/wibukey.html
- [2] https://www.wibu.com/support/security-advisories.html
WIBU Systems has released a new version for WibuKey for Windows. Siemens recommends to update this device driver on affected Windows client installations, where WibuKey Dongles are used. See also the chapter "Additional Information" for more details.
Vulnerabilities 2
-
High 8.8
An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds c…
-
Medium 5.5
An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds ch…
Revision history
-
#1
Publication Date
References
-
SSA-368868: Multiple Vulnerabilities in WibuKey for Windows - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-368868.html