CVE-2019-18296

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to port 5010/tcp. This...

CVE-2019-18287

CVE-2019-18287 affects the SPPA-T3000 Application Server (all versions

CVE-2019-18286

CVE-2019-18286 affects the SPPA-T3000 Application Server (all versions

CVE-2019-18288

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with valid authentication at the RMI interface could be able to gain remote code execution through an unsecured file upload. Please note that an attacker needs to have access to th...

CVE-2019-18286

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18287. Please note that an attacker needs to have...

CVE-2019-18283

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The AdminService is available without authentication on the Application Server. An attacker can gain remote code execution by sending specifically crafted objects to one of its functions. Plea...

CVE-2019-18305

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290,...

CVE-2019-18291

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290,...

CVE-2019-18298

Summary for CVE-2019-18303 / related RH advisories : SPPA-T3000 MS3000 Migration Server (all versions) is reported vulnerable to a network-accessible Denial-of-Service via specially crafted UDP/TCP traffic sent to port 5010/tcp. The Red Hat entries for CVEs 2019-18303, 18305, 18301, 18302, 18304,...

CVE-2019-18292

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290,...

CVE-2019-18304

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290,...

CVE-2019-18295

CVE-2019-18295 concerns SPPA-T3000 MS3000 Migration Server (All versions). The Red Hat entries confirm that an attacker with network access to the MS3000 server can trigger a Denial-of-Service and potentially achieve remote code execution by sending specially crafted packets to port 5010/tcp. The...

CVE-2019-18289

Summary (CVE-2019-18289 / related CVEs): SPPA-T3000 MS3000 Migration Server (all versions) is vulnerable to a network-accessible issue on 5010/tcp. A crafted packet could cause a Denial-of-Service and may lead to remote code execution. Attacker requires network access; no user interaction. Connec...

CVE-2019-18298

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290,...

CVE-2019-18288

Summary of CVE-2019-18288 (Siemens SPPA-T3000 Application Server) Affected product: SPPA-T3000 Application Server (all versions prior to Service Pack R8.2 SP2). Vulnerability: Unsecured file upload via the RMI interface allows an authenticated attacker to achieve remote code execution. Access to ...

CVE-2019-18284

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The AdminService is available without authentication on the Application Server. An attacker can use methods exposed via this interface to receive password hashes of other users and to change...

CVE-2019-18285

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The RMI communication between the client and the Application Server is unencrypted. An attacker with access to the communication channel can read credentials of a valid user. Please note that ...

CVE-2019-18297

CVE-2019-18297 affects Siemens SPPA-T3000 MS3000 Migration Server (all versions). An attacker with local access and low privileges can gain root privileges by sending specially crafted packets to a named pipe. The vulnerability requires local access to exploit; no public exploits are noted in the...

CVE-2019-18290

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18291,...

CVE-2019-18296

Summary: CVE-2019-18296 affects the SPPA-T3000 MS3000 Migration Server (all versions). The issue allows a network-remote attacker to cause a Denial-of-Service and potentially achieve remote code execution by sending specially crafted packets to port 5010/tcp. This vulnerability is stated as indep...