Denial-of-Service Vulnerability in SPPA-T3000 MS3000 Migration Server by Siemens

CVE-2019-18291

What is CVE-2019-18291?

A vulnerability exists in the SPPA-T3000 MS3000 Migration Server that allows an attacker with network access to trigger a Denial-of-Service condition. By sending specifically crafted packets to port 5010/tcp, the attacker can disrupt the normal functionality of the server. It is important to note that exploitation requires the attacker to have predefined network access to the MS3000 Server. As of the advisory publication, there were no known public exploits for this vulnerability.

References