Local Privilege Escalation in SPPA-T3000 Migration Server by Siemens
CVE-2019-18308
Key Information:
- Vendor
Siemens
- Vendor
- CVE Published:
- 12 December 2019
What is CVE-2019-18308?
A local privilege escalation vulnerability has been discovered in the SPPA-T3000 MS3000 Migration Server across all versions. An attacker with local access and a low-privileged user account could exploit this weakness by manipulating certain files within the local file system, potentially gaining root access. It is crucial to note that to successfully exploit this vulnerability, the attacker must have local access to the MS3000 server. As of the advisory publication, no public exploitation was reported.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
SPPA-T3000 MS3000 Migration Server All versions
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved