Denial-of-Service Vulnerability in SPPA-T3000 Migration Server by Siemens

CVE-2019-18329

Summary

A vulnerability exists in the SPPA-T3000 MS3000 Migration Server that allows an attacker with network access to trigger a Denial-of-Service condition and potentially execute remote code. This is achieved by sending specially crafted packets to port 5010/tcp. It should be noted that successful exploitation requires network access to the MS3000 Server. At the time of the advisory's release, there were no known public exploits associated with this vulnerability.

References