6338 matches found
Citrix SD-WAN Security Update
Description of Problem Multiple denial of service vulnerabilities have been identified in the Citrix SD-WAN Appliance and Citrix SD-WAN Center Management Console. These vulnerabilities could permit a remote attacker to cause a denial of service by causing a host crash or by causing reduced servic...
Silver Peak Systems EdgeConnect SD-WAN Path Traversal Vulnerability
Silver Peak Systems EdgeConnect SD-WAN is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides path conditioning, application classification, routing and virtual WAN overlay. A path traversal vulnerability exists in Silver Peak Systems...
Silver Peak Systems EdgeConnect SD-WAN Cross-Site Request Forgery Vulnerability
Silver Peak Systems EdgeConnect SD-WAN is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides path conditioning, application classification, routing and virtual WAN overlay. A cross-site request forgery vulnerability exists in Silver Pe...
CVE-2019-16105
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI...
CVE-2019-16104
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATHINFO...
CVE-2019-16103
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation by administrators from the menu to a root Bash OS shell via the spsshell feature...
CVE-2019-16103
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation by administrators from the menu to a root Bash OS shell via the spsshell feature...
CVE-2019-16104
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATHINFO...
CVE-2019-16100
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source...
CVE-2019-16099
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file...
Design/Logic Flaw
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source...
Cross site scripting
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATHINFO...
Privilege escalation
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation by administrators from the menu to a root Bash OS shell via the spsshell feature...
Directory traversal
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI...
CVE-2019-16099
CVE-2019-16099 affects Silver Peak EdgeConnect SD-WAN versions prior to 8.1.7.x. The issue is a cross-site request forgery (CSRF) that can be triggered by sending JSON data to a .swf file, enabling an attacker to cause unintended requests on a vulnerable device. Public details in connected docume...
CVE-2019-16100
CVE-2019-16100 concerns Silver Peak EdgeConnect SD-WAN (pre-8.1.7.x). The Red Hat advisory and NVD entry describe that remote attackers can trigger a web-interface outage by sending slow client-side HTTP traffic from a single source, affecting the web UI. Affected product: Silver Peak EdgeConnect...
CVE-2019-16101
CVE-2019-16101 affects Silver Peak EdgeConnect SD-WAN prior to version 8.1.7.x. The issue allows remote attackers to trigger the REST API by sending malformed JSON (e.g., to rest/json/banners), potentially causing the system to leak sensitive stack traces. Impact is information disclosure via sta...
CVE-2019-16101
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI...
CVE-2019-16102
Affected product: Silver Peak EdgeConnect SD-WAN. Vulnerability: SNMP service exposes public rocommunity and trapcommunity values in versions before 8.1.7.x. Impact: potential unauthorized access/monitoring via SNMP due to public community values. Exploitation details are not provided in the docu...