CVE-2019-18304: Integer Overflow
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18304?
CVE-2019-18304 is classified as a Denial-of-Service vulnerability, impacting the availability of the affected system.
How do I fix CVE-2019-18304?
To mitigate CVE-2019-18304, ensure that the network access to the MS3000 Server is restricted and apply any available vendor updates.
What versions of the software are affected by CVE-2019-18304?
All versions of the Siemens SPPA-T3000 MS3000 Migration Server are affected by CVE-2019-18304.
What type of attack does CVE-2019-18304 enable?
CVE-2019-18304 allows an attacker to trigger a Denial-of-Service condition on the MS3000 Server.
What is the port used for CVE-2019-18304 exploitation?
CVE-2019-18304 can be exploited by sending specially crafted packets to port 5010/tcp.