CVE-2019-18297
CVE-2019-18297
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Dec 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with local access to the MS3000 Server and low privileges could gain root privileges by sending specifically crafted packets to a named pipe. Please note that an attacker needs to have local access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Affected products
Siemens · SPPA-T3000 MS3000 Migration ServerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →