CVE-2019-18292

Vulnerability

A denial-of-service vulnerability exists in the Siemens SPPA-T3000 MS3000 Migration Server affecting all versions [1]. The flaw is reachable when an attacker sends specifically crafted packets to TCP port 5010 [1]. No authentication or special configuration is required beyond having network access to the MS3000 server [1].

Exploitation

An attacker with network connectivity to the MS3000 server can trigger the denial-of-service by sending a set of specially crafted packets to port 5010/tcp [1]. No user interaction or credentials are required. At the time of advisory publication, no public exploit code was known [1].

Impact

Successful exploitation causes a denial-of-service condition on the MS3000 Migration Server, disrupting its availability [1]. The vulnerability does not provide the attacker with any ability to read, modify, or delete data; only service availability is affected [1].

Mitigation

As of the advisory publication date (2019-12-12), Siemens had not released a fix [1]. Siemens advised applying defense-in-depth measures such as network segmentation and restricting access to trusted systems [1]. Users should monitor Siemens’ security advisory portal for updates. The vulnerability is not known to be on the CISA KEV list.