829 matches found
Design/Logic Flaw
The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator...
Code injection
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal...
Design/Logic Flaw
IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative...
CVE-2020-12142
CVE-2020-12142 affects the EdgeConnect appliance. An admin user with shell access can retrieve IPSec UDP key material (IPSec seed and nonce) via CLI, REST APIs, or the Linux shell, enabling potential decryption of in-flight traffic. The issue requires administrative access and is described across...
CVE-2020-12142 IPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentials
IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative...
CVE-2020-12144
CVE-2020-12144 describes a trust-management vulnerability in Silver Peak EdgeConnect where the certificate used to identify the Cloud Portal to EdgeConnect devices is not validated. This allows establishing a TLS connection from EdgeConnect to an untrusted portal, potentially enabling man-in-the-...
CVE-2020-12143
The CVE-2020-12143 issue arises from failure to validate the certificate used to identify Orchestrator to EdgeConnect devices, allowing an attacker to establish a TLS connection from EdgeConnect to an untrusted Orchestrator. Affected product context centers on EdgeConnect/Orchestrator interaction...
CVE-2020-12143 The certificate used to identify Orchestrator to EdgeConnect devices is not validated
The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator...
PT-2020-13063 · Silver Peak · Silver Peak Edgeconnect
Name of the Vulnerable Software and Affected Versions: Silver Peak EdgeConnect affected versions not specified Description: The issue arises from the lack of validation of the certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices. This oversight allows an attacker to...
PT-2020-13062 · Riverbed · Orchestrator
Name of the Vulnerable Software and Affected Versions: Orchestrator affected versions not specified Description: The issue arises from the lack of validation of the certificate used to identify Orchestrator to EdgeConnect devices. This oversight allows an attacker to establish a TLS connection fr...
Silver Peak Systems EdgeConnect SD-WAN Information Disclosure Vulnerability
Silver Peak Systems EdgeConnect SD-WAN is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides path conditioning, application classification, routing and virtual WAN overlay. A security vulnerability exists in Silver Peak Systems...
Silver Peak Systems EdgeConnect SD-WAN Path Traversal Vulnerability
Silver Peak Systems EdgeConnect SD-WAN is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides path conditioning, application classification, routing and virtual WAN overlay. A path traversal vulnerability exists in Silver Peak Systems...
Silver Peak Systems EdgeConnect SD-WAN License Issue Vulnerability
Silver Peak Systems EdgeConnect SD-WAN is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides path conditioning, application classification, routing and virtual WAN overlay. An authorization issue vulnerability exists in Silver Peak...
Silver Peak Systems EdgeConnect SD-WAN Cross-Site Scripting Vulnerability
Silver Peak Systems EdgeConnect SD-WAN is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides path conditioning, application classification, routing and virtual WAN overlay. A cross-site scripting vulnerability exists in Silver Peak...
Silver Peak Systems EdgeConnect SD-WAN Cross-Site Request Forgery Vulnerability
Silver Peak Systems EdgeConnect SD-WAN is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides path conditioning, application classification, routing and virtual WAN overlay. A cross-site request forgery vulnerability exists in Silver Pe...
CVE-2019-16105
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI...
CVE-2019-16104
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATHINFO...
CVE-2019-16103
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation by administrators from the menu to a root Bash OS shell via the spsshell feature...