VULNERABILITY INTELLIGENCE
CVE-2018-3989
CVSS score4.3 MEDIUM
EPSS probability0.57%
CISA KEVNot currently listed
Published2019-02-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Description
An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400).A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.
Weakness classification
- CWE-908: Use of Uninitialized Resource
Primary references
- talos-cna@cisco.com — Third Party Advisory, VDB Entry
- talos-cna@cisco.com — Third Party Advisory
- talos-cna@cisco.com — Third Party Advisory
- talos-cna@cisco.com
- talos-cna@cisco.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory