File Manipulation Vulnerability in SPPA-T3000 MS3000 Migration Server by Siemens

CVE-2019-18321

Summary

A file manipulation vulnerability has been discovered in the SPPA-T3000 MS3000 Migration Server, affecting all versions. This flaw enables an attacker with network access to the server to execute arbitrary read and write operations on files within the local file system. The exploitation of this vulnerability requires the attacker to send specially crafted network packets to port 5010/tcp. It is essential to note that no known public exploitation has been reported at the time of this advisory, although having network access is a prerequisite for potential exploitation. Protecting the server against unauthorized access is crucial to mitigate this risk.

References