Directory Exposure Vulnerability in SPPA-T3000 Application Server by Siemens

CVE-2019-18287

What is CVE-2019-18287?

A directory exposure vulnerability has been identified in the SPPA-T3000 Application Server, affecting all versions prior to Service Pack R8.2 SP2. The vulnerability allows unauthorized access to directory listings and files that may contain sensitive information. Exploitation of this vulnerability requires an attacker to have access to the Application Highway. While there has been no public exploitation reported at the time of the advisory, it is essential to mitigate this risk to protect sensitive data. Users are advised to update to the latest service pack to secure their systems.

References