Denial-of-Service and Remote Code Execution Vulnerability in SPPA-T3000 MS3000 Migration Server by Siemens

CVE-2019-18296

What is CVE-2019-18296?

A security vulnerability exists in the SPPA-T3000 MS3000 Migration Server, allowing attackers with network access to trigger a Denial-of-Service condition. By sending specially crafted packets to port 5010/tcp, an attacker may also gain the ability to execute arbitrary code remotely. It is important to note that exploitation requires network accessibility to the MS3000 Server. This vulnerability is not related to other issues reported in earlier advisories, and at this time no known public exploitation has been documented.

References