Denial-of-Service Vulnerability in SPPA-T3000 MS3000 Migration Server by Siemens

CVE-2019-18295

What is CVE-2019-18295?

A significant vulnerability exists in the SPPA-T3000 MS3000 Migration Server that allows an attacker with network access to initiate a Denial-of-Service condition. By sending specially crafted packets to TCP port 5010, an attacker could potentially lead to remote code execution. This vulnerability highlights the importance of network security measures, as exploitation requires valid network access to the affected server. At the time of this advisory, there is no indication of public exploitation of this vulnerability.

References