CVE-2019-18288

CVE-2019-18288 is a remote code execution vulnerability affecting all versions of Siemens SPPA-T3000 Application Server prior to Service Pack R8.2 SP2. An authenticated attacker with access to the RMI interface and Application Highway can exploit an unsecured file upload to achieve remote code execution. This vulnerability carries a high CVSS score of 8.8, indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. While no public exploits or active exploitation were known at the time of advisory publication, and there is no community discussion or media coverage, organizations using affected versions should prioritize patching.