CVE-2019-18292: High severity siemens sppa-t3000 vulnerability

Published Dec 12, 2019
·
Updated

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

Affected Software

1 affected component
Siemens Sppa-t3000 Ms3000 Migration Server

Event History

Dec 12, 2019
CVE Published
via MITRE·07:08 PM
Data Sourced
via MITRE·07:08 PM
DescriptionWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2019-18292?

CVE-2019-18292 has a severity rating that indicates a high risk of Denial-of-Service due to network access vulnerabilities.

2

How do I fix CVE-2019-18292?

To fix CVE-2019-18292, it is recommended to apply any available security patches from Siemens for the SPPA-T3000 MS3000 Migration Server.

3

What type of vulnerability is CVE-2019-18292?

CVE-2019-18292 is classified as a Denial-of-Service vulnerability that can be exploited through specially crafted packets.

4

Which software is affected by CVE-2019-18292?

CVE-2019-18292 affects all versions of the Siemens SPPA-T3000 MS3000 Migration Server.

5

Can CVE-2019-18292 be exploited remotely?

Yes, CVE-2019-18292 can be exploited remotely by an attacker with network access to the affected server.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203