Remote Code Execution Vulnerability in SPPA-T3000 Migration Server by Siemens

CVE-2019-18313

What is CVE-2019-18313?

A vulnerability exists in the SPPA-T3000 MS3000 Migration Server across all versions. This flaw allows an attacker with network access to execute arbitrary code by sending specially crafted objects to the RPC services. It is essential to note that this vulnerability requires network access to the MS3000 Server for exploitation. As of the advisory's publication, there have been no known instances of public exploitation related to this security issue.

References