vciy

Siemens SPPA-T3000 MS3000 Migration Server: 35 records in one advisory

35 records announced together, published 2019-12-12, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

8 of 35 records name something of its own. For the other 27, held sources say the same thing about each.

Most commonly mapped weakness across the batch: CWE-122: Heap-based Buffer Overflow.

What this page does not cover

This batch is 35 of the 54 records that cite the same advisory. The other 19 are different findings announced alongside it.

None of those 19 is grouped with any other. Each one has its own record page and nothing else.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2019-18289no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18290no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18291no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18292no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18293no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18294no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18295no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18296no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18297named pipeCWE-122: Heap-based Buffer Overflow
CVE-2019-18298no title heldCWE-190: Integer Overflow or Wraparound
CVE-2019-18299no title heldCWE-190: Integer Overflow or Wraparound
CVE-2019-18300no title heldCWE-190: Integer Overflow or Wraparound
CVE-2019-18301no title heldCWE-190: Integer Overflow or Wraparound
CVE-2019-18302no title heldCWE-190: Integer Overflow or Wraparound
CVE-2019-18303no title heldCWE-190: Integer Overflow or Wraparound
CVE-2019-18304no title heldCWE-190: Integer Overflow or Wraparound
CVE-2019-18305no title heldCWE-190: Integer Overflow or Wraparound
CVE-2019-18306no title heldCWE-125: Out-of-bounds Read
CVE-2019-18307no title heldCWE-125: Out-of-bounds Read
CVE-2019-18308cve-2019-18309CWE-284: Improper Access Control
CVE-2019-18309cve-2019-18308CWE-284: Improper Access Control
CVE-2019-18310cve-2019-18311CWE-121: Stack-based Buffer Overflow
CVE-2019-18311cve-2019-18310CWE-952: SFP Secondary Cluster: Missing…
CVE-2019-18312running exploitation securityCWE-287: Improper Authentication
CVE-2019-18313no title heldCWE-434: Unrestricted Upload of File with…
CVE-2019-18321cve-2019-18322CWE-287: Improper Authentication
CVE-2019-18322cve-2019-18321CWE-287: Improper Authentication
CVE-2019-18323no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18324no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18325no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18326no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18327no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18328no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18329no title heldCWE-122: Heap-based Buffer Overflow
CVE-2019-18330no title heldCWE-122: Heap-based Buffer Overflow

35 records, read from the index as it stood on 2026-10-18. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.