Remote Code Execution Vulnerability in SPPA-T3000 Application Server by Siemens

CVE-2019-18314

Summary

A security issue has been identified in the SPPA-T3000 Application Server, where an attacker with network access can exploit this vulnerability to execute arbitrary code remotely. This can be achieved by sending specifically crafted objects through the RMI interface. It's crucial for organizations using this application server to ensure they are using Service Pack R8.2 SP2 or later to mitigate potential risks. At the time of reporting, there was no evidence of public exploitation of this vulnerability.

References