CVE-2019-18299

Vulnerability

The vulnerability exists in Siemens SPPA-T3000 MS3000 Migration Server (all versions). An attacker can cause a Denial-of-Service condition by sending specifically crafted packets to TCP port 5010. No authentication or privileged network position is required — only network reachability to the MS3000 server on port 5010/tcp. The vulnerability is independent from a set of related CVEs listed in the advisory [1].

Exploitation

An attacker with network access to the MS3000 server can exploit this vulnerability without any authentication. The attack consists of transmitting specially crafted packets to port 5010/tcp. No user interaction or prior access is needed. At the time of the advisory publication, no public exploitation of this vulnerability was known [1].

Impact

Successful exploitation results in a Denial-of-Service (DoS) condition, disrupting the availability of the MS3000 Migration Server. The confidentiality and integrity of the system are not directly affected by this specific weakness.

Mitigation

Siemens has not released a fix as of the advisory publication date (2019-12-12). Users should restrict network access to port 5010/tcp on the MS3000 server to trusted hosts only, using firewall rules or network segmentation. No workaround beyond network access control is described in the available references [1].