CVE-2019-18286

Vulnerability

Siemens SPPA-T3000 Application Server, in all versions prior to Service Pack R8.2 SP2, contains a vulnerability where the Application Server exposes directory listings and files containing sensitive information [1]. An attacker must have network access to the Application Highway to reach the vulnerable endpoint.

Exploitation

To exploit this vulnerability, an attacker must have network access to the Application Highway component. No additional authentication or user interaction is required beyond that access [1]. Once access is established, the attacker can enumerate directories and retrieve sensitive files by sending requests to the exposed endpoints.

Impact

Successful exploitation allows an attacker to obtain sensitive information from the affected system, potentially including configuration data, credentials, or other internal details [1]. This disclosure can facilitate further attacks against the environment.

Mitigation

Siemens has released Service Pack R8.2 SP2 to address this vulnerability; all customers should upgrade to this version or later [1]. At the time of advisory publication, no public exploitation was known and the vulnerability was not listed on CISA's KEV [1].