Critical severity10.0NVD Advisory· Published Feb 5, 2019· Updated Jun 17, 2026
CVE-2018-3991
CVE-2018-3991
Description
An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Range: = 6.40.2402.500
cpe:2.3:o:siemens:simatic_wincc_open_architecture:3.14:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:siemens:simatic_wincc_open_architecture:3.14:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_wincc_open_architecture:3.15:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_wincc_open_architecture:3.16:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- talosintelligence.com/vulnerability_reports/TALOS-2018-0659nvdExploitThird Party Advisory
- www.securityfocus.com/bid/107005nvdThird Party AdvisoryVDB Entry
- cert-portal.siemens.com/productcert/pdf/ssa-760124.pdfnvdMitigationThird Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-844562.pdfnvdThird Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-902727.pdfnvd
News mentions
0No linked articles in our index yet.