CVE-2019-18335

CVE-2019-18335 is a vulnerability affecting all versions of Siemens SPPA-T3000 Application Server prior to R8.2 SP2. An unauthenticated attacker with network access to the Application Server can exploit this flaw by sending specially crafted packets to port 80/tcp, gaining access to sensitive logs and configuration files. Rated Medium severity with a CVSS score of 5.3, this vulnerability requires network access but no user interaction or authentication. The primary impact is a compromise of confidentiality (C:L), allowing unauthorized disclosure of system information. Currently, there is no known public exploitation, nor is there any readily available exploit code in common repositories like Metasploit or ExploitDB. The vulnerability has received minimal community discussion or media coverage, suggesting low public awareness.