High severity7.2NVD Advisory· Published Aug 2, 2024· Updated Jun 17, 2026

CVE-2024-38878

Description

A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions). Affected devices allow authenticated users to export diagnostics data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download arbitrary files from the file system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Siemens Foundation/Omnivise T3000 Application Server2 versions
cpe:2.3:a:siemens:omnivise_t3000_application_server:r9.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:siemens:omnivise_t3000_application_server:r9.2:*:*:*:*:*:*:*
- (no CPE)range: All versions
Omnivise/T3000 Application Serverllm-create
Range: All versions
Omnivise/T3000llm-fuzzy
Range: R8.2 SP3, R8.2 SP4
Siemens Foundation/Sppa T3000 Application Servercpe-rescue
Range: 0
Siemens Foundation/Omnivise T3000cpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

cert-portal.siemens.com/productcert/html/ssa-857368.htmlnvdMitigationVendor Advisory
seclists.org/fulldisclosure/2024/Nov/5nvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.009
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000