CVE-2018-3991 Memory corruption in n/a

What is CVE-2018-3991?

CVE-2018-3991 is a critical memory corruption vulnerability in n/a, published on 5 Feb 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigger this vulnerability.

Weakness: CWE-787

Which versions are affected by CVE-2018-3991?

It affects 2 products.

Products include Siemens Simatic Wincc Open Architecture, Wibu Wibukey.

How do I fix CVE-2018-3991?

No fix has been published for CVE-2018-3991 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2018-3991 being exploited?

There is no known exploitation of CVE-2018-3991 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2018-13799 Privilege escalation in SIMATIC WinCC OA V3.14 and prior Critical 9.1
• CVE-2014-1697 Code injection in n/a High 7.5
• CVE-2014-1696 Weak cryptography in n/a Medium 5.0
• CVE-2014-1698 Path traversal in n/a Medium 5.0
• CVE-2014-1699 Denial of service in n/a Medium 5.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wqfw-3h2h-7vwc.