CVE-2018-3991
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigger this vulnerability.
Affected Platforms (CPE)
📦
Wibu
Wibukey
= 6.40.2402.500💻
Siemens
Simatic Wincc Open Architecture
= 3.14💻
Siemens
Simatic Wincc Open Architecture
= 3.15💻
Siemens