CyberRota Analysis
AI-GeneratedWibuKey up to version 6.70 for Windows contains a vulnerability in the WibuKey64.sys driver due to improper memory boundary validation, allowing attackers to manipulate pointers beyond the program's scope. This can lead to denial of service, and there is a potential risk for remote code execution and privilege escalation, given that the driver operates with system-level privileges. Organizations using affected versions of WibuKey should prioritize patching this vulnerability to mitigate the associated risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remote Code Execution and Privilege Escalation (since the driver runs with system privileges).