Denial-of-Service Vulnerability in SPPA-T3000 MS3000 Migration Server by Siemens
CVE-2019-18307
7.5HIGH
Key Information:
- Vendor
- Siemens
- Vendor
- CVE Published:
- 12 December 2019
Summary
A vulnerability allows an attacker with network access to the SPPA-T3000 MS3000 Migration Server to initiate a Denial-of-Service condition. This can be achieved by sending specially crafted packets to port 5010/tcp. While exploitation requires network access to the server, it does not depend on other known vulnerabilities. As of the latest advisory, there have been no public incidents of exploitation reported.
Affected Version(s)
SPPA-T3000 MS3000 Migration Server All versions
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved