CVE-2018-3991

CRITICAL

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigger this vulnerability.

Published: Feb 5, 2019 Modified: Jun 17, 2026

CWE-787

CVSS Metrics

CVSSv3

Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: CHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products (4)

Vendor	Product	Version
wibu	wibukey	6.40.2402.500
siemens	simatic_wincc_open_architecture	3.14
siemens	simatic_wincc_open_architecture	3.15
siemens	simatic_wincc_open_architecture	3.16

GitHub Security Advisory GHSA-wqfw-3h2h-7vwc

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey...

References (10)

http://www.securityfocus.com/bid/107005 Third Party Advisory, VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf Mitigation, Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-902727.pdf
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0659 Exploit, Third Party Advisory
http://www.securityfocus.com/bid/107005 Third Party Advisory, VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf Mitigation, Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-902727.pdf
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0659 Exploit, Third Party Advisory

Risk Scores

CVSS Score 10.0 / 10

EPSS Score 34.33%

Top 2% most likely to be exploited

Threat Score 50.3 / 100

Data Sources

NVD EPSS GitHub