CVE-2019-18310
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...
CVE-2019-18310 is a high vulnerability (CVSS 7.5) in Siemens Sppa-t3000 Ms3000 Migration Server, published December 12, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.24%, the 69th percentile. Fixed in elfutils 0.175-r0.
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 7061/tcp. This vulnerability is independent from CVE-2019-18311. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.5
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 7061/tcp. This vulnerability is independent from CVE-2019-18311. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
- Record
CVE-2019-18310- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-121, CWE-787
- Updated
- 2026-11-02
CVE List No score
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 7061/tcp. This vulnerability is independent from CVE-2019-18311. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
- Record
CVE-2019-18310- Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2019-8099 No score
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 7061/tcp. This vulnerability is independent from CVE-2019-18311. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
- Record
EUVD-2019-8099- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4g49-qqgp-g5cv No score
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 7061/tcp. This vulnerability is independent from CVE-2019-18311. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
- Record
GHSA-4g49-qqgp-g5cv- Weakness
- CWE-787
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-18310
7.5
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 7061/tcp. This vulnerability is independent from CVE-2019-18311. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
- Record
ALPINE-CVE-2019-18310- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2019-18310
7.5
CVE-2019-18310 does not affect BellSoft software
- Record
BELL-CVE-2019-18310- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
7.5
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 7061/tcp. This vulnerability is independent from CVE-2019-18311. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
- Record
CVE-2019-18310- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
elfutilsAlpine:v3.12 |
before 0.175-r0 | 0.175-r0 |
elfutilsAlpine:v3.13 |
before 0.175-r0 | 0.175-r0 |
elfutilsAlpine:v3.14 |
before 0.175-r0 | 0.175-r0 |
elfutilsAlpine:v3.15 |
before 0.175-r0 | 0.175-r0 |
elfutilsAlpine:v3.16 |
before 0.175-r0 | 0.175-r0 |
elfutilsAlpine:v3.17 |
before 0.175-r0 | 0.175-r0 |
elfutilsAlpine:v3.18 |
before 0.175-r0 | 0.175-r0 |
elfutilsAlpine:v3.19 |
before 0.175-r0 | 0.175-r0 |
elfutilsAlpine:v3.20 |
before 0.175-r0 | 0.175-r0 |
elfutilsAlpine:v3.21 |
before 0.175-r0 | 0.175-r0 |
elfutilsAlpine:v3.22 |
before 0.175-r0 | 0.175-r0 |
elfutilsAlpine:v3.23 |
before 0.175-r0 | 0.175-r0 |
elfutilsAlpine:v3.24 |
before 0.175-r0 | 0.175-r0 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |