CVE-2018-3991: siemens simatic_wincc_open_architecture Out-of-bounds Write
Vulnerability summary
CVE-2018-3991 is a critical (CVSS 10.0) Out-of-bounds Write vulnerability in siemens simatic_wincc_open_architecture. EPSS estimates a 34.33% chance of exploitation in the next 30 days, higher than 98.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 05-02-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigger this vulnerability.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
34.33%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 34.33% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (talosintelligence.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Siemens1 product
- simatic_wincc_open_architecture3.14 | 3.15 | 3.16
Wibu1 product
- wibukey6.40.2402.500
2 vendors · 2 products
References
5 links- cert-portal.siemens.com/productcert/pdf/ssa-760124.pdfX Refsource CONFIRMMitigationThird Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-902727.pdfX Refsource CONFIRM
- talosintelligence.com/vulnerability_reports/TALOS-2018-0659X Refsource MISCExploitThird Party Advisory