Directory Listing Vulnerability in SPPA-T3000 Application Server by Siemens

CVE-2019-18286

What is CVE-2019-18286?

The SPPA-T3000 Application Server presents a vulnerability wherein directory listings and files containing sensitive information may be exposed. This situation arises in all versions prior to Service Pack R8.2 SP2, creating a potential risk for unauthorized access to sensitive data. While exploiting this vulnerability necessitates that an attacker gain access to the Application Highway, it poses a significant threat if not addressed. It is critical for users to take preventive measures to secure their systems against this type of exposure.

References