Directory Exposure Vulnerability in SPPA-T3000 Application Server by Siemens
CVE-2019-18287
Key Information:
- Vendor
Siemens
- Vendor
- CVE Published:
- 12 December 2019
What is CVE-2019-18287?
A directory exposure vulnerability has been identified in the SPPA-T3000 Application Server, affecting all versions prior to Service Pack R8.2 SP2. The vulnerability allows unauthorized access to directory listings and files that may contain sensitive information. Exploitation of this vulnerability requires an attacker to have access to the Application Highway. While there has been no public exploitation reported at the time of the advisory, it is essential to mitigate this risk to protect sensitive data. Users are advised to update to the latest service pack to secure their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
SPPA-T3000 Application Server All versions < Service Pack R8.2 SP2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved