CVE-2019-16102

Affected product: Silver Peak EdgeConnect SD-WAN. Vulnerability: SNMP service exposes public rocommunity and trapcommunity values in versions before 8.1.7.x. Impact: potential unauthorized access/monitoring via SNMP due to public community values. Exploitation details are not provided in the docu...

CVE-2019-16102

Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity...

CVE-2019-16103

CVE-2019-16103 concerns Silver Peak EdgeConnect SD-WAN (pre-8.1.7.x). The vulnerability allows privilege escalation from the user-facing menu to a root Bash OS shell via the spsshell feature. Affected product: EdgeConnect SD-WAN; affected versions: before 8.1.7.x. Root cause and impact: elevation...

CVE-2019-16103

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation by administrators from the menu to a root Bash OS shell via the spsshell feature...

CVE-2019-16104

Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATHINFO...

CVE-2019-16104

Silver Peak EdgeConnect SD-WAN is affected by CVE-2019-16104. A reflected cross-site scripting (XSS) vulnerability exists in versions prior to 8.1.7.x, exploitable via the rest/json/configdb/download/ PATH_INFO exposed by the device. The issue is confirmed across multiple sources (CNVD, Red Hat/R...

CVE-2019-16105

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI...

CVE-2019-16105

Silver Peak EdgeConnect SD-WAN pre-8.1.7.x is vulnerable to directory traversal via the rest/json/configdb/download/ URI. Root cause: path traversal in the download endpoint allows access to restricted directories outside the intended path. Affected product: Silver Peak EdgeConnect SD-WAN (versio...

Silver Peak Systems EdgeConnect SD-WAN Input Validation Error Vulnerability

Silver Peak Systems EdgeConnect SD-WAN is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides path conditioning, application classification, routing and virtual WAN overlay. An input validation error vulnerability exists in Silver Peak...