Local Privilege Escalation Flaw in SPPA-T3000 MS3000 Migration Server by Siemens

CVE-2019-18297

What is CVE-2019-18297?

A vulnerability has been discovered in the SPPA-T3000 MS3000 Migration Server that allows an attacker with local access and low privileges to escalate their permissions to root level. This can be achieved by sending specifically crafted packets to a named pipe within the server. For exploitation, the attacker must have local access to the MS3000, which limits the attack surface. As of the latest advisory, there were no known public exploits associated with this vulnerability. Detailed security advisories can be referenced for further information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References