http://packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.html

https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf

OR
     *cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:sp1:*:*:*:*:*:*
     *cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:* versions up to (including) r8.2

OR
     *cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:* versions up to (excluding) r8.2
     *cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:-:*:*:*:*:*:*
     *cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:sp1:*:*:*:*:*:*

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing
sensitive information.

This vulnerability is independent from CVE-2019-18286.

Please note that an attacker needs to have access to the Application Highway
in order to exploit this vulnerability.

At the time of advisory publication no public exploitation of this security
vulnerability was known.

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18286. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18286. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing
sensitive information.

This vulnerability is independent from CVE-2019-18286.

Please note that an attacker needs to have access to the Application Highway
in order to exploit this vulnerability.

At the time of advisory publication no public exploitation of this security
vulnerability was known.

NIST CWE-200

NIST CWE-287

OR
     *cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:* versions up to (including) r8.2
     *cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:sp1:*:*:*:*:*:*

A vulnerability has been identified in SPPA-T3000 Application Server (All versions). The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18286. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18286. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NIST (AV:N/AC:L/Au:N/C:P/I:N/A:N)

NIST CWE-287

OR
     *cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:*

http://packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.html No Types Assigned

http://packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.html Third Party Advisory, VDB Entry

https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf No Types Assigned

https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf Mitigation, Vendor Advisory

http://packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.html [No Types Assigned]

A vulnerability has been identified in SPPA-T3000 Application Server (All versions). The Application Server exposes directory listings and files containing
sensitive information.

This vulnerability is independent from CVE-2019-18286.

Please note that an attacker needs to have access to the Application Highway
in order to exploit this vulnerability.

At the time of advisory publication no public exploitation of this security
vulnerability was known.

A vulnerability has been identified in SPPA-T3000 Application Server (All versions). The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18286. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.