PT-2019-5349 · Siemens · Sppa-T3000 Application Server

Publicado 2019-12-10 · Atualizado 2022-03-25 · CVE-2019-18288

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2

Description The issue is related to an unsecured file upload, allowing an attacker with valid authentication at the RMI interface to potentially gain remote code execution. This could be exploited by an attacker with access to the Application Highway. At the time of reporting, there were no known public exploitations of this security issue.

Recommendations For versions prior to Service Pack R8.2 SP2, update to Service Pack R8.2 SP2 or later to resolve the issue. As a temporary workaround, consider restricting access to the Application Highway and the RMI interface to minimize the risk of exploitation.

Correção

Memory Corruption

Unrestricted File Upload

Enumeração de Fraquezas

CWE-787

CWE-434

Identificadores relacionados

BDU:2020-02439

CVE-2019-18288

Produtos afetados

Sppa-T3000 Application Server

Referências · 5

• https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf · Aviso do Fabricante
• http://packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.html · Nota
• https://osv.dev/vulnerability/CVE-2019-18288 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2020-02439 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-18288 · Nota de Segurança