Silver Peak / HPE Aruba EdgeConnect - Orchestrator Panel Detection

Silver Peak now HPE Aruba Networking EdgeConnect SD-WAN Orchestrator is a centralised management platform for EdgeConnect SD-WAN appliances. The web portal is commonly exposed on HTTPS ports including 8443. !/usr/bin/env python3 -- coding: utf-8 -- """Silver Peak now HPE Aruba Networking...

CVE-2019-16101

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI...

CVE-2019-16099

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file...

CVE-2019-16105

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI...

CVE-2019-16102

Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity...

CVE-2019-16100

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source...

EUVD-2020-4463

Malware in sbrugna...

EUVD-2019-6947

Malware in sbrugna...

EUVD-2019-6950

Malware in sbrugna...

EUVD-2019-6945

Malware in sbrugna...

EUVD-2019-6948

Malware in sbrugna...

EUVD-2020-4462

Malware in sbrugna...

EUVD-2019-6944

Malware in sbrugna...

EUVD-2014-2996

Malware in sbrugna...

EUVD-2020-4464

Malware in sbrugna...

EUVD-2019-6949

Malware in sbrugna...

EUVD-2014-2997

Malware in sbrugna...

EUVD-2020-4459

Malware in sbrugna...

EUVD-2019-6946

Malware in sbrugna...

CVE-2020-12144

The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal...