File Read and Write Vulnerability in MS3000 Migration Server from Siemens

CVE-2019-18322

What is CVE-2019-18322?

A vulnerability exists in the SPPA-T3000 MS3000 Migration Server, allowing an attacker with network access to potentially read and write arbitrary files on the local file system. This is achieved by sending specially crafted packets to TCP port 5010. It is crucial to note that the attacker must have network access to exploit this vulnerability. As of the advisory's publication, no public exploitation of this vulnerability has been reported.

References