945 matches found
CVE-2019-16102
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity...
CVE-2019-16100
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source...
CVE-2019-16099
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file...
CVE-2019-16101
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI...
Cross site scripting
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATHINFO...
Design/Logic Flaw
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source...
Design/Logic Flaw
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity...
Directory traversal
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI...
Privilege escalation
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation by administrators from the menu to a root Bash OS shell via the spsshell feature...
Code injection
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI...
CVE-2019-16099
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file...
CVE-2019-16099
CVE-2019-16099 affects Silver Peak EdgeConnect SD-WAN versions prior to 8.1.7.x. The issue is a cross-site request forgery (CSRF) that can be triggered by sending JSON data to a .swf file, enabling an attacker to cause unintended requests on a vulnerable device. Public details in connected docume...
CVE-2019-16100
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source...
CVE-2019-16100
CVE-2019-16100 concerns Silver Peak EdgeConnect SD-WAN (pre-8.1.7.x). The Red Hat advisory and NVD entry describe that remote attackers can trigger a web-interface outage by sending slow client-side HTTP traffic from a single source, affecting the web UI. Affected product: Silver Peak EdgeConnect...
CVE-2019-16101
CVE-2019-16101 affects Silver Peak EdgeConnect SD-WAN prior to version 8.1.7.x. The issue allows remote attackers to trigger the REST API by sending malformed JSON (e.g., to rest/json/banners), potentially causing the system to leak sensitive stack traces. Impact is information disclosure via sta...
CVE-2019-16101
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI...
CVE-2019-16102
Affected product: Silver Peak EdgeConnect SD-WAN. Vulnerability: SNMP service exposes public rocommunity and trapcommunity values in versions before 8.1.7.x. Impact: potential unauthorized access/monitoring via SNMP due to public community values. Exploitation details are not provided in the docu...
CVE-2019-16102
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity...
CVE-2019-16103
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation by administrators from the menu to a root Bash OS shell via the spsshell feature...
CVE-2019-16103
CVE-2019-16103 concerns Silver Peak EdgeConnect SD-WAN (pre-8.1.7.x). The vulnerability allows privilege escalation from the user-facing menu to a root Bash OS shell via the spsshell feature. Affected product: EdgeConnect SD-WAN; affected versions: before 8.1.7.x. Root cause and impact: elevation...