Skip to content
OpenAdvisories
High SSA-368868 2 CVEs

SSA-368868: Multiple Vulnerabilities in WibuKey for Windows

Published Oct 8, 2024 · Updated Oct 8, 2024

Summary

Several Siemens products (optionally) offer the use of WibuKey Dongles [1] for licensing.
According to a recent publication by WIBU Systems (WIBU-94453 at [2]), the Windows device driver for these Dongles contains vulnerabilities as listed below.

- [1] https://www.wibu.com/products/wibukey.html
- [2] https://www.wibu.com/support/security-advisories.html

WIBU Systems has released a new version for WibuKey for Windows. Siemens recommends to update this device driver on affected Windows client installations, where WibuKey Dongles are used. See also the chapter "Additional Information" for more details.

Vulnerabilities 2

  • High 8.8

    An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds c…

  • Medium 5.5

    An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds ch…

Revision history

  1. #1

    Publication Date

References