User Enumeration Vulnerability in SPPA-T3000 Application Server by Siemens

CVE-2019-18334

Summary

A security flaw has been discovered in the SPPA-T3000 Application Server that allows an attacker with network access to enumerate valid usernames. By sending specially crafted packets to the TCP port 8090, unauthorized users could potentially gather valid user information, posing a significant security threat. It is crucial to note that an attacker must already have network access to the Application Server to exploit this vulnerability. At the time of reporting, there were no known public exploitations of this issue.

References