CVE-2019-18311: siemens sppa-t3000_ms3000_migration_server
Vulnerability summary
CVE-2019-18311 is a high (CVSS 7.5) vulnerability in siemens sppa-t3000_ms3000_migration_server. EPSS estimates a 1.50% chance of exploitation in the next 30 days, higher than 73.9% of scored vulnerabilities.
Timeline
- 12-12-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 7061/tcp. This vulnerability is independent from CVE-2019-18310. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.50%
Chance of exploitation in the next 30 days
Percentile
74%
Versus all other CVEs
30-day change
0.00 pp
From 1.50% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-952SFP Secondary Cluster: Missing AuthenticationThis category identifies Software Fault Patterns (SFPs) within the Missing Authentication cluster.
- CWE-306Missing Authentication for Critical FunctionThe product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Affected systems
Siemens1 product
- sppa-t3000_ms3000_migration_serverAll versions (No fix recorded)
1 vendor · 1 product