Local Privilege Escalation Flaw in SPPA-T3000 MS3000 Migration Server by Siemens

CVE-2019-18297

Summary

A vulnerability has been discovered in the SPPA-T3000 MS3000 Migration Server that allows an attacker with local access and low privileges to escalate their permissions to root level. This can be achieved by sending specifically crafted packets to a named pipe within the server. For exploitation, the attacker must have local access to the MS3000, which limits the attack surface. As of the latest advisory, there were no known public exploits associated with this vulnerability. Detailed security advisories can be referenced for further information.

References