CVE-2019-18313

State
Published
Severity
Not scored
Published
Dec 12, 2019
Updated
Aug 5, 2024
Reserved
Oct 23, 2019

Read the record on cve.org

Description

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could gain remote code execution by sending specifically crafted objects to one of the RPC services. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-434 Unrestricted Upload of File with Dangerous Type

Affected Products

ProductVersions
SPPA-T3000 MS3000 Migration ServerSiemens
  • All versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.