CVE-2019-18307
Description
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, and CVE-2019-18306. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
An unauthenticated, network-accessible denial-of-service vulnerability in Siemens SPPA-T3000 MS3000 Migration Server (all versions) via crafted packets to port 5010/tcp.
Vulnerability
A denial-of-service vulnerability exists in the Siemens SPPA-T3000 MS3000 Migration Server. An attacker with network access to the server can trigger a service disruption by sending specifically crafted packets to TCP port 5010. All versions of the MS3000 Migration Server are affected [1]. This issue is independent from several other CVEs listed in the advisory.
Exploitation
An attacker needs network connectivity to the MS3000 server. No authentication is required. The exploitation involves sending specially crafted packets to port 5010/tcp. No user interaction is needed [1]. At the time of advisory publication, no public exploitation was known.
Impact
Successful exploitation results in a denial-of-service condition, affecting the availability of the MS3000 Migration Server. No other CIA impacts (confidentiality or integrity) are described [1].
Mitigation
Siemens has not released a patch for this vulnerability as of the publication date. The advisory notes that no fix was available at the time. Operators should restrict network access to port 5010/tcp to trusted hosts only and monitor for unusual traffic. The product may be at end of life; consult Siemens support for guidance [1].
AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
2- Range: *
- Siemens/SPPA-T3000 MS3000 Migration Serverv5Range: All versions
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.htmlmitrex_refsource_MISC
- cert-portal.siemens.com/productcert/pdf/ssa-451445.pdfmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.