CVE-2019-18320
Last modified
CVE-2019-18320 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. EPSS estimates a 1.07% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Sppa-T3000 Application Server | < r8.2 |
| Siemens | Sppa-T3000 Application Server | r8.2 |
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdfMitigation, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdfMitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-18320?
How severe is CVE-2019-18320?
How do I fix CVE-2019-18320?
Are you affected by CVE-2019-18320?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST