Application Server Vulnerability in SPPA-T3000 by Siemens

CVE-2019-18335

Summary

A vulnerability in the SPPA-T3000 Application Server allows an attacker with network access to potentially gain unauthorized access to sensitive logs and configuration files. By sending specifically crafted packets to port 80/tcp, an attacker may exploit this weakness to extract critical information. It's important to note that exploitation requires network access to the Application Server. As of the advisory publication date, there have been no known public exploits targeting this security issue.

References