CVE-2019-16100

CVE-2019-16100 concerns Silver Peak EdgeConnect SD-WAN (pre-8.1.7.x). The Red Hat advisory and NVD entry describe that remote attackers can trigger a web-interface outage by sending slow client-side HTTP traffic from a single source, affecting the web UI. Affected product: Silver Peak EdgeConnect...

CVE-2019-16101

CVE-2019-16101 affects Silver Peak EdgeConnect SD-WAN prior to version 8.1.7.x. The issue allows remote attackers to trigger the REST API by sending malformed JSON (e.g., to rest/json/banners), potentially causing the system to leak sensitive stack traces. Impact is information disclosure via sta...

CVE-2019-16101

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI...

CVE-2019-16102

Affected product: Silver Peak EdgeConnect SD-WAN. Vulnerability: SNMP service exposes public rocommunity and trapcommunity values in versions before 8.1.7.x. Impact: potential unauthorized access/monitoring via SNMP due to public community values. Exploitation details are not provided in the docu...

CVE-2019-16102

Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity...

CVE-2019-16103

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation by administrators from the menu to a root Bash OS shell via the spsshell feature...

CVE-2019-16103

CVE-2019-16103 concerns Silver Peak EdgeConnect SD-WAN (pre-8.1.7.x). The vulnerability allows privilege escalation from the user-facing menu to a root Bash OS shell via the spsshell feature. Affected product: EdgeConnect SD-WAN; affected versions: before 8.1.7.x. Root cause and impact: elevation...

CVE-2019-16104

Silver Peak EdgeConnect SD-WAN is affected by CVE-2019-16104. A reflected cross-site scripting (XSS) vulnerability exists in versions prior to 8.1.7.x, exploitable via the rest/json/configdb/download/ PATH_INFO exposed by the device. The issue is confirmed across multiple sources (CNVD, Red Hat/R...

CVE-2019-16105

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI...

CVE-2019-16105

Silver Peak EdgeConnect SD-WAN pre-8.1.7.x is vulnerable to directory traversal via the rest/json/configdb/download/ URI. Root cause: path traversal in the download endpoint allows access to restricted directories outside the intended path. Affected product: Silver Peak EdgeConnect SD-WAN (versio...

Citrix SD-WAN Center Unauthenticated Remote Command Injection

The remote Citrix SD-WAN Center is affected by a remote command injection vulnerability due to improper sanitization of user-supplied input in the ping action of DiagnosticController. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP request, to execute arbitrary...

CVE-2019-15046

Zoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information leakage during Fail Over Service FOS replication, aka SD-79989...

Information disclosure

Zoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information leakage during Fail Over Service FOS replication, aka SD-79989...

sd-sru.ch Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-935086 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting sd-sru.ch website and its...

CVE-2019-1951

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

CVE-2019-1951

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

Design/Logic Flaw

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

CVE-2019-1951 Cisco SD-WAN Solution Packet Filtering Bypass Vulnerability

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

CVE-2019-1951

CVE-2019-1951 concerns Cisco SD-WAN Solution packet filtering bypass. The vulnerability arises from improper traffic filtering conditions on affected devices, allowing an unauthenticated, remote attacker to bypass L3/L4 traffic filters by sending a crafted TCP packet, potentially injecting arbitr...

CVE-2019-1951 Cisco SD-WAN Solution Packet Filtering Bypass Vulnerability

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...