CVE-2019-18296
Description
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18289, CVE-2019-18293, and CVE-2019-18295. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
A vulnerability in Siemens SPPA-T3000 MS3000 Migration Server allows DoS and potential RCE via specially crafted packets to port 5010/tcp.
Vulnerability
The Siemens SPPA-T3000 MS3000 Migration Server (all versions) contains a vulnerability that can be triggered by sending specially crafted packets to port 5010/tcp. This issue is independent from CVE-2019-18289, CVE-2019-18293, and CVE-2019-18295. No authentication is required, only network access to the server.
Exploitation
An attacker with network access to the MS3000 Server can exploit this vulnerability by sending specifically crafted packets to port 5010/tcp. This can cause a Denial-of-Service condition and potentially lead to remote code execution. At the time of advisory publication, no public exploitation was known [1].
Impact
Successful exploitation results in a denial-of-service condition and may allow an attacker to execute arbitrary code on the server, gaining full control over the affected system.
Mitigation
As of the advisory publication date (2019-12-12), no fix was available. The recommended mitigation is to restrict network access to the MS3000 server, particularly blocking port 5010/tcp from untrusted networks. Users should monitor Siemens for security updates.
AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
2- Range: All versions
- Siemens/SPPA-T3000 MS3000 Migration Serverv5Range: All versions
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.htmlmitrex_refsource_MISC
- cert-portal.siemens.com/productcert/pdf/ssa-451445.pdfmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.