CVE-2019-18320
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Se ha identificado una vulnerabilidad en SPPA-T3000 Application Server (todas las versiones). Un atacante con acceso de red al Application Server podría cargar archivos arbitrarios sin autenticación. Tenga en cuenta que un atacante necesita tener acceso de red al Application Server a fin de explotar esta vulnerabilidad. Al momento de la publicación del aviso, no era conocida la explotación pública de esta vulnerabilidad de seguridad
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-10-23 CVE Reserved
- 2019-12-12 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-287: Improper Authentication
- CWE-434: Unrestricted Upload of File with Dangerous Type
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf | 2022-03-04 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Siemens Search vendor "Siemens" | Sppa-t3000 Application Server Search vendor "Siemens" for product "Sppa-t3000 Application Server" | < r8.2 Search vendor "Siemens" for product "Sppa-t3000 Application Server" and version " < r8.2" | - |
Affected
| ||||||
| Siemens Search vendor "Siemens" | Sppa-t3000 Application Server Search vendor "Siemens" for product "Sppa-t3000 Application Server" | r8.2 Search vendor "Siemens" for product "Sppa-t3000 Application Server" and version "r8.2" | - |
Affected
| ||||||
| Siemens Search vendor "Siemens" | Sppa-t3000 Application Server Search vendor "Siemens" for product "Sppa-t3000 Application Server" | r8.2 Search vendor "Siemens" for product "Sppa-t3000 Application Server" and version "r8.2" | sp1 |
Affected
| ||||||