CVE-2018-3989: wibu wibukey Use of Uninitialized Resource

EPSS trend

Probability

0.57%

Chance of exploitation in the next 30 days

Percentile

46%

Versus all other CVEs

30-day change

0.00 pp

From 0.57% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.57%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (talosintelligence.com)
Maturity: unknown

References

5 links

www.securityfocus.com/bid/107005VDB EntryX Refsource BIDThird Party Advisory
talosintelligence.com/vulnerability_reports/TALOS-2018-0657X Refsource MISCExploitThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-844562.pdfX Refsource CONFIRMThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-760124.pdfX Refsource CONFIRMThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-902727.pdfX Refsource CONFIRM

Related vulnerabilities

CVE-2018-3990wibuwibukey0.64%7y ago05-02-2019 22:00An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400). A specially crafted IRP request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation. An attacker can send an IRP request to trigger this vulnerability.CVE-2018-3991siemenssimatic_wincc_open_architecture+134.33%7y ago05-02-2019 22:00An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigger this vulnerability.CVE-2021-47810wibuwibukey+10.23%9mo ago15-01-2026 23:25WibuKey Runtime 6.51 contains an unquoted service path vulnerability in the WkSvW32.exe service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\PROGRAM FILES (X86)\WIBUKEY\SERVER\WkSvW32.exe' to inject malicious executables and escalate privileges.CVE-2024-45181wibuwibukey0.22%2y ago12-09-2024 00:00An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an arbitrary address write, resulting in kernel memory corruption.CVE-2024-45182wibuwibukey0.20%2y ago12-09-2024 00:00An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary address read, resulting in Denial of Service.

All vulnerabilities inwibukey

CVE-2018-3989: wibu wibukey Use of Uninitialized Resource

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References