VendorsSilver Peakunity_edgeconnect_sd-wanany version
Vulnerabilities

Silver Peak Unity EdgeConnect SD-WAN any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2019-16102
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity.
Published 2019-09-08 · Modified
9.8EPSS 0.015
CVE-2019-16103
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation (by administrators) from the menu to a root Bash OS shell via the spsshell feature.
Published 2019-09-08 · Modified
9.0EPSS 0.018
CVE-2019-16099
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file.
Published 2019-09-08 · Modified
8.8EPSS 0.006
CVE-2019-16100
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source.
Published 2019-09-08 · Modified
7.5EPSS 0.018
CVE-2019-16104
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATH_INFO.
Published 2019-09-08 · Modified
6.1EPSS 0.008
CVE-2019-16101
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI.
Published 2019-09-08 · Modified
5.3EPSS 0.015
CVE-2019-16105
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI.
Published 2019-09-08 · Modified
4.9EPSS 0.017