CVE-2019-18332: Infoleak
First published: Thu Dec 12 2019(Updated: )
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to directory listings of the server by sending specifically crafted packets to 80/tcp, 8095/tcp or 8080/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens Sppa-t3000 Application Server | <r8.2 | |
| Siemens Sppa-t3000 Application Server | =r8.2 | |
| Siemens Sppa-t3000 Application Server | =r8.2-sp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-18332?
CVE-2019-18332 is a vulnerability identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2).
What is the severity of CVE-2019-18332?
The severity of CVE-2019-18332 is medium, with a severity value of 5.3.
What is the affected software for CVE-2019-18332?
The affected software is Siemens Sppa-t3000 Application Server version up to exclusive r8.2, Siemens Sppa-t3000 Application Server version exactly r8.2, and Siemens Sppa-t3000 Application Server version exactly r8.2-sp1.
How can an attacker exploit CVE-2019-18332?
An attacker with network access to the Application Server could gain access to directory listings by sending specifically crafted packets to ports 80/tcp, 8095/tcp, or 8080/tcp.
Where can I find more information about CVE-2019-18332?
You can find more information about CVE-2019-18332 at the following reference: [https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf](https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf).
- collector/nvd-index
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/event
- agent/severity
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/siemens
- canonical/siemens sppa-t3000 application server
- version/siemens sppa-t3000 application server/r8.2
- version/siemens sppa-t3000 application server/r8.2-sp1