PT-2019-5349 · Siemens · Sppa-T3000 Application Server

Published 2019-12-10 · Updated 2022-03-25 · CVE-2019-18288

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2

Description The issue is related to an unsecured file upload, allowing an attacker with valid authentication at the RMI interface to potentially gain remote code execution. This could be exploited by an attacker with access to the Application Highway. At the time of reporting, there were no known public exploitations of this security issue.

Recommendations For versions prior to Service Pack R8.2 SP2, update to Service Pack R8.2 SP2 or later to resolve the issue. As a temporary workaround, consider restricting access to the Application Highway and the RMI interface to minimize the risk of exploitation.

Fix

Memory Corruption

Unrestricted File Upload

Weakness Enumeration

CWE-787

CWE-434

Related Identifiers

BDU:2020-02439

CVE-2019-18288

Affected Products

Sppa-T3000 Application Server

References · 5

• https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-18288 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02439 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-18288 · Security Note
• http://packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.html · Note