Lucene search

MitreCVE-2019-16103

HistorySep 08, 2019 - 5:15 p.m.

CVE-2019-16103

2019-09-0817:15:11

mitre

web.nvd.nist.gov

silver peak

edgeconnect

sd-wan

privilege escalation

cve-2019-16103

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

44.1%

JSON

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation (by administrators) from the menu to a root Bash OS shell via the spsshell feature.

Affected configurations

Nvd

Node

silver-peakunity_edgeconnect_sd-wan_firmwareMatch8.1.4.9_65644

AND

silver-peakunity_edgeconnect_sd-wanMatch-

VendorProductVersionCPE
silver-peakunity_edgeconnect_sd-wan_firmware8.1.4.9_65644cpe:2.3:o:silver-peak:unity_edgeconnect_sd-wan_firmware:8.1.4.9_65644:*:*:*:*:*:*:*
silver-peakunity_edgeconnect_sd-wan-cpe:2.3:h:silver-peak:unity_edgeconnect_sd-wan:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
silver-peak	unity_edgeconnect_sd-wan_firmware	8.1.4.9_65644	cpe:2.3:o:silver-peak:unity_edgeconnect_sd-wan_firmware:8.1.4.9_65644:::::::*
silver-peak	unity_edgeconnect_sd-wan	-	cpe:2.3:h:silver-peak:unity_edgeconnect_sd-wan:-:::::::*

References

github.com/sdnewhop/sdwannewhope/blob/master/reports/Silverpeak%20EdgeConnect%20Multiple%20Vulnerabilities%20-%20032018.pdf

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

44.1%

JSON

Related for CVE-2019-16103