Medium severity · published Feb 5, 2019
CVE-2018-3989
An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400).A specially…
5.5
CVSS
0.6%
EPSS
No
On KEV
Description
An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400).A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Wibukey · Wibu
6.40 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-3989
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-3989
Third Party Advisory
http://www.securityfocus.com/bid/107005
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-902727.pdf
Exploit
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0657
More from Wibukey
9.8
CVE-2018-3991
An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500
7.8
CVE-2021-47810
WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path
7.8
CVE-2024-45181
An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70
7.8
CVE-2018-3990
An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400)
5.5
CVE-2024-45182
An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary…