Critical severity9.8NVD Advisory· Published Dec 12, 2019· Updated Jun 17, 2026
CVE-2019-18283
CVE-2019-18283
Description
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The AdminService is available without authentication on the Application Server. An attacker can gain remote code execution by sending specifically crafted objects to one of its functions. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2< R8.2 SP2+ 1 more
- (no CPE)range: < R8.2 SP2
- (no CPE)range: All versions < Service Pack R8.2 SP2
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.htmlnvdThird Party AdvisoryVDB Entry
- cert-portal.siemens.com/productcert/pdf/ssa-451445.pdfnvdMitigationVendor Advisory
News mentions
0No linked articles in our index yet.