CVE-2019-18287

Vulnerability

The Siemens SPPA-T3000 Application Server, in all versions prior to Service Pack R8.2 SP2, exposes directory listings and files containing sensitive information [1]. This is a configuration or design weakness that allows unauthorized access to potentially confidential data on the server. The vulnerability is independent from CVE-2019-18286 [1].

Exploitation

To exploit this vulnerability, an attacker must have access to the Application Highway network [1]. Beyond this network requirement, no additional authentication or user interaction is mentioned in the available references [1]. The attacker can likely navigate directory listings to retrieve sensitive files by sending crafted HTTP requests to the application server, though the specific steps are not detailed in the source [1].

Impact

Successful exploitation leads to the disclosure of sensitive information [1]. The attacker gains unauthorized access to file contents and directory structures, compromising the confidentiality of the system. The available references do not specify escalation to privilege elevation or code execution [1].

Mitigation

Siemens has released Service Pack R8.2 SP2 to fix this vulnerability [1]. Users should upgrade to this version or later. As of the advisory publication date (2019-12-10 per Packet Storm), no public exploitation was known [1]. No workarounds are documented in the available references [1].