Design/Logic Flaw

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability i...

Design/Logic Flaw

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290,...

CVE-2019-18313

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server could gain remote code execution by sending specifically crafted objects to one of the RPC services. Please note that an attacker needs to have network acce...

CVE-2019-18328

Summary: CVE-2019-18328 (and related cohorts) affect SPPA-T3000 MS3000 Migration Server across all versions. A network attacker can send specifically crafted packets to port 5010/tcp, enabling a Denial-of-Service and potentially remote code execution. This vulnerability is independent from other ...

CVE-2019-18326

CVE-2019-18326 concerns the SPPA-T3000 MS3000 Migration Server (all versions). The Red Hat advisories for related CVEs (e.g., CVE-2019-18323/29/30, etc.) describe that an attacker with network access to the MS3000 server can send specifically crafted packets to port 5010/tcp to trigger a Denial-o...

CVE-2019-18327

SPPA-T3000 MS3000 Migration Server (All versions) is affected by CVE-2019-18327. A network-authenticated attacker can send crafted packets to 5010/tcp, causing Denial of Service and potentially remote code execution. This vulnerability appears independent from CVE-2019-18323/24/25/26/28/29/30. Th...

CVE-2019-18329

The CVE-2019-18329 entry concerns SPPA-T3000 MS3000 Migration Server (all versions). The vulnerability allows a network-adjacent attacker to send crafted traffic to port 5010/tcp, potentially causing a Denial-of-Service and, in some cases, remote code execution. The Red Hat entries for CVE-2019-1...

CVE-2019-18321

CVE-2019-18321 affects the SPPA-T3000 MS3000 Migration Server (all versions). A network-accessible attacker can read/write arbitrary files on the local filesystem by sending specially crafted packets to port 5010/tcp. The Red Hat advisories confirm the same vulnerability independently from CVE-20...

CVE-2019-18324

CVE-2019-18324 (and related CVEs) concerns SPPA-T3000 MS3000 Migration Server all versions. Red Hat advisories describe an attacker with network access can send crafted packets to 5010/tcp to cause a Denial-of-Service and potentially achieve remote code execution. The impact is described as netwo...

CVE-2019-18325

SPPA-T3000 MS3000 Migration Server (all versions) is affected by CVE-2019-18325. An attacker with network access can trigger a Denial-of-Service and potentially achieve remote code execution by sending specially crafted packets to TCP/5010. The Red Hat CVE entries for related CVEs (CVE-2019-18323...

CVE-2019-18321

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically crafted packets to port 5010/tcp. This vulnerability is...

CVE-2019-18328

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability i...

CVE-2019-18330

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server could cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability...

CVE-2019-18323

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server could cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability...

CVE-2019-18313

CVE-2019-18313 affects Siemens SPPA-T3000 MS3000 Migration Server (all versions). The vulnerability allows remote code execution by sending specially crafted objects to one of the RPC services, with exploitation requiring network access to the MS3000 Server and no authentication on the AdminServi...

CVE-2019-18308

SPPA-T3000 MS3000 Migration Server (all versions) is affected. A local attacker with low privileges can achieve root privileges by manipulating specific files in the local filesystem. The root-cause is a local-file-based privilege escalation weakness, independent of CVE-2019-18309. Attacker acces...

CVE-2019-18322

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically crafted packets to port 5010/tcp. This vulnerability is...

CVE-2019-18309

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with local access to the MS3000 Server and a low privileged user account could gain root privileges by manipulating specific files in the local file system. This vulnerability is independent from...

CVE-2019-18324

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability i...

CVE-2019-18312

CVE-2019-18312 affects Siemens SPPA-T3000 MS3000 Migration Server (all versions). A remote attacker with network access to the MS3000 Server could enumerate running RPC services. Public exploits are not reported in the provided sources. Red Hat, CNVD, and other connected records corroborate the v...