Design/Logic Flaw

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted objects via RMI. Please note that an attacker needs to have network...

Design/Logic Flaw

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted packets to 8888/tcp. Please note that an attacker needs to have netwo...

Design/Logic Flaw

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted packets to 1099/tcp. Please note that an attacker needs to have netwo...

Design/Logic Flaw

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain access to path and filenames on the server by sending specifically crafted packets to 1099/tcp. Please note that an attacke...

Design/Logic Flaw

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the...

Design/Logic Flaw

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from...

Design/Logic Flaw

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18287. Please note that an attacker needs to have...

CVE-2019-18335

The CVE-2019-18335 issue affects Siemens SPPA-T3000 Application Server (all versions prior to Service Pack R8.2 SP2). According to Red Hat, NVD, and CISA sources, an attacker with network access to the Application Server could read logs and configuration files by sending specially crafted packets...

CVE-2019-18333

CVE-2019-18333 affects Siemens SPPA-T3000 Application Server (all versions

CVE-2019-18335

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could be able to gain access to logs and configuration files by sending specifically crafted packets to 80/tcp. Please note that an...

CVE-2019-18333

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain access to filenames on the server by sending specifically crafted packets to 8090/tcp. Please note that an attacker needs t...

CVE-2019-18334

CVE-2019-18334 affects the SPPA-T3000 Application Server (all versions before Service Pack R8.2 SP2). An attacker with network access can enumerate valid usernames by sending crafted packets to 8090/tcp. The advisory notes no public exploits known at publication. Siemens’ mitigation is to upgrade...

CVE-2019-18314

CVE-2019-18314 affects Siemens SPPA-T3000 Application Server (all versions prior to Service Pack R8.2 SP2). A remote attacker with network access can achieve remote code execution by sending specially crafted objects via RMI. Red Hat, NVD, and CVE lists corroborate the RCE via AdminService expose...

CVE-2019-18318

CVE-2019-18318 affects SPPA-T3000 Application Server (all versions

CVE-2019-18320

CVE-2019-18320 affects Siemens SPPA-T3000 Application Server (all versions prior to Service Pack R8.2 SP2). The vulnerability allows an attacker with network access to upload arbitrary files without authentication. Public exploits are not indicated in the provided documents; however, exploitation...

CVE-2019-18317

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from...

CVE-2019-18315

CVE-2019-18315 affects Siemens SPPA-T3000 Application Server (all versions prior to Service Pack R8.2 SP2). An attacker with network access can achieve remote code execution by sending specially crafted packets to port 8888/TCP. The issue stems from an improper/exposed interface on the Applicatio...

CVE-2019-18317

CVE-2019-18317 relates to the SPPA-T3000 Application Server. All versions prior to Service Pack R8.2 SP2 are affected. The root issue is that an attacker who can access the server over the network can cause a Denial-of-Service by sending specially crafted objects via RMI. The Red Hat CVE entries ...

CVE-2019-18331

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain access to path and filenames on the server by sending specifically crafted packets to 1099/tcp. Please note that an attacke...

CVE-2019-18316

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted packets to 1099/tcp. Please note that an attacker needs to have netwo...