CVE-2019-18287
CVE-2019-18287
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Dec 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18286. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Affected products
Siemens · SPPA-T3000 Application ServerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →