Unencrypted RMI Communication in SPPA-T3000 Application Server by Siemens
CVE-2019-18285
5.9MEDIUM
Key Information:
- Vendor
Siemens
- Vendor
- CVE Published:
- 12 December 2019
What is CVE-2019-18285?
A security vulnerability exists in the Siemens SPPA-T3000 Application Server due to unencrypted RMI communication between the client and the server. This flaw allows an attacker who has access to the communication channel to intercept and read the credentials of a valid user. The attacker must gain access to the Application Highway to exploit this issue. As of the latest advisory, there are no reports of public exploitation.
Affected Version(s)
SPPA-T3000 Application Server All versions < Service Pack R8.2 SP2