4.3med
CVE-2018-3989
An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Vers…
Published 7 y ago · modified 4 mo ago · JSON
CVSS
4.3
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
0.6%
percentile 47%
Public exploits
0
none known
Summary
An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400).A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.
Exploit prediction (EPSS)
0.57% probability of exploitation in the next 30 days, higher than 47% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 4.3 | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N |
| CNA | 3.0 | 4.3 | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N |
| NVD | 3.0 | 5.5 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Weakness
- CWE-908 Use of Uninitialized Resource
References
- securityfocus.com /bid/107005 · vdb-entry, x_refsource_BID, x_transferred
- talosintelligence.com /vulnerability_reports/TALOS-2018-0657 · x_refsource_MISC, x_transferred
- cert-portal.siemens.com /productcert/pdf/ssa-844562.pdf · x_refsource_CONFIRM, x_transferred
- cert-portal.siemens.com /productcert/pdf/ssa-760124.pdf · x_refsource_CONFIRM, x_transferred
- cert-portal.siemens.com /productcert/pdf/ssa-902727.pdf · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-3989
- NVD: CVE-2018-3989
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.