File Access Vulnerability in SPPA-T3000 Application Server by Siemens

CVE-2019-18333

What is CVE-2019-18333?

A critical file access vulnerability exists in the SPPA-T3000 Application Server, affecting all versions prior to Service Pack R8.2 SP2. An attacker with network access can exploit this flaw by sending specially crafted packets to the application's TCP port 8090, potentially allowing them to gain unauthorized access to sensitive filenames stored on the server. At the time of the advisory, no known public exploits were reported, highlighting the necessity for network security measures and proper access controls to mitigate the risk.

References