CVE-2019-18294
Description
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
A Denial-of-Service vulnerability in Siemens SPPA-T3000 MS3000 Migration Server allows network attackers to crash the service via crafted packets on port 5010/tcp.
Vulnerability
The vulnerability resides in the Siemens SPPA-T3000 MS3000 Migration Server (all versions) and allows an attacker with network access to trigger a Denial-of-Service condition by sending specially crafted packets to port 5010/tcp [1]. No authentication or special privileges are required to reach the vulnerable code path.
Exploitation
An attacker only needs network access to the MS3000 Server to exploit this vulnerability. By sending specifically crafted packets to port 5010/tcp, the attacker can cause a denial-of-service condition without any user interaction [1].
Impact
Successful exploitation results in a Denial-of-Service (DoS), rendering the MS3000 Migration Server unavailable. No other impacts (e.g., information disclosure, code execution) are documented [1].
Mitigation
Siemens has released a security advisory [1] describing the vulnerability. Users should apply the vendor-recommended patch or mitigation measures. At the time of advisory publication, no public exploitation was known [1]. No workarounds are documented.
AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
2- Range: All versions
- Siemens/SPPA-T3000 MS3000 Migration Serverv5Range: All versions
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.htmlmitrex_refsource_MISC
- cert-portal.siemens.com/productcert/pdf/ssa-451445.pdfmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.