Denial-of-Service and Remote Code Execution Vulnerability in SPPA-T3000 MS3000 Migration Server by Siemens

CVE-2019-18296

What is CVE-2019-18296?

A security vulnerability exists in the SPPA-T3000 MS3000 Migration Server, allowing attackers with network access to trigger a Denial-of-Service condition. By sending specially crafted packets to port 5010/tcp, an attacker may also gain the ability to execute arbitrary code remotely. It is important to note that exploitation requires network accessibility to the MS3000 Server. This vulnerability is not related to other issues reported in earlier advisories, and at this time no known public exploitation has been documented.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References