attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
0.10% probability of exploitation in the next 30 days (1% percentile) -- FIRST.org's EPSS model.
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
wibu-systems-ag
wibukey
Siemens
PSS(R)SINCAL V21.5
Siemens
PSS(R)SINCAL V22.0
Siemens
PSS(R)SINCAL V22.5
Subsystems
General OT
Sectors
Multiple
What to Know
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified. (NVD)
What to Do
Monitor wibu-systems-ag's and Siemens's web pages for any future patch releases.