Local Privilege Escalation in SPPA-T3000 Migration Server by Siemens

CVE-2019-18308

What is CVE-2019-18308?

A local privilege escalation vulnerability has been discovered in the SPPA-T3000 MS3000 Migration Server across all versions. An attacker with local access and a low-privileged user account could exploit this weakness by manipulating certain files within the local file system, potentially gaining root access. It is crucial to note that to successfully exploit this vulnerability, the attacker must have local access to the MS3000 server. As of the advisory publication, no public exploitation was reported.

References