Vulnerabilities in WibuKey Could Lead to Code Execution

guest · Dec 24, 2018

Vulnerabilities in WibuKey Could Lead to Code Execution
December 24, 2018
https://www.securityweek.com/vulnerabilities-wibukey-could-lead-code-execution

As Cisco’s security researchers point out, over 3,000 companies worldwide have been using the WibuKey solution to protect intellectual property and other digital content.

A total of three vulnerabilities were discovered in the DRM solution, leading to the unauthorized reading of kernel memory information, privilege escalation on the local system, and potential execution of code on accessible WibuKey network servers.

The most important of the three vulnerabilities is an exploitable heap overflow in the WkbProgramLow function of WibuKey Network server management, tracked as CVE-2018-3991. The bug can be triggered using a specially crafted TCP package, and could lead to remote kernel level code execution, Cisco says.
[...] CVE-2018-3989, the second vulnerability [...] The third security flaw, CVE-2018-3990
Click to expand...

guest · Feb 25, 2019

Serious Flaws in WibuKey DRM Impact Siemens Products
February 25, 2019
https://www.securityweek.com/serious-flaws-wibukey-drm-impact-siemens-products

Cisco Talos revealed in December that the WibuKey DRM has three vulnerabilities that can lead to information disclosure, privilege escalation, and remote code execution.
It turns out that Siemens also uses WibuKey for some of its products, including SICAM 230, a process control and monitoring system designed for the energy sector, and the SIMATIC WinCC Open Architecture (OA) human-machine interface (HMI) product.

Siemens has advised customers to update the WibuKey DRM to version 6.50 or higher, which should patch the vulnerabilities. The German industrial giant also recommends blocking port 22347 via a firewall to prevent exploitation of CVE-2018-3991.
Cisco has published technical information for each of the vulnerabilities, along with proof-of-concept (PoC) exploits, which increases the chances of exploitation.
Click to expand...

guest · Mar 7, 2019

Several Industrial Automation Products Affected by WibuKey DRM Flaws
March 7, 2019
https://www.securityweek.com/several-industrial-automation-products-affected-wibukey-drm-flaws

Several other companies based in Central Europe have also warned customers that the WibuKey flaws expose their products to attacks.

Austria-based COPA-DATA also alerted users that some of its Zenon products use the DRM solution for dongle licensing and are affected. The company has published an 11-page advisory detailing the flaws and their impact on its products.
[...] Finally, Germany-based IT GmbH, which specializes in home and building automation, posted a notification it received from Wibu Systems and informed customers that the flaws impact its Elvis visualization products.

While Talos made its findings public in December, Wibu said this was done by mistake and that it initially agreed with Talos to only disclose the flaws on January 24 to give customers time to update their installations.
Click to expand...

Log in or Sign up

Vulnerabilities in WibuKey Could Lead to Code Execution

guest Guest

guest Guest

guest Guest

Log in or Sign up

Vulnerabilities in WibuKey Could Lead to Code Execution

guest Guest

guest Guest

guest Guest

Useful Searches