CVE-2018-3989

Name of the Vulnerable Software and Affected Versions WibuKey.sys version 6.40 (Build 2400)

Description A kernel memory disclosure issue exists in the 0x8200E804 IOCTL handler functionality. This is due to insufficient input validation, allowing an attacker to send a specially crafted IRP request and cause the driver to return uninitialized memory. As a result, this can lead to kernel memory disclosure.

Recommendations For WibuKey.sys version 6.40 (Build 2400), consider disabling the 0x8200E804 IOCTL handler functionality until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.