CVE-2019-18283 — Vulnetix

CVE-2019-18283 PUBLISHED CVSS 9.800000190734863 CRITICAL

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The AdminService is available without authentication on the Application Server. An attacker can gain remote code execution by sending specifically crafted objects to one of its functions. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

EPSS 9.23% · 92.9th percentile

Risk Scores

CVSS 3.1

9.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

9.23%

92.9th percentile

Affected Products

Vendor	Product	Versions
siemens	sppa-t3000_application_server	0, r8.2, *
Siemens	SPPA-T3000 Application Server	All versions < Service Pack R8.2 SP2

Exploit Intelligence

Timeline

Dec 10, 2019 CVE Published
Apr 14, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Oct 26, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 1, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Nov 6, 2022 EPSS Score
Mar 7, 2023 EPSS Score
Mar 11, 2023 EPSS Score

References

Open in Interactive Console →