PT-2019-14511 · Silver Peak · Silver Peak Edgeconnect Sd-Wan

Publicado 2019-09-08 · Atualizado 2020-08-24 · CVE-2019-16103

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Silver Peak EdgeConnect SD-WAN versions prior to 8.1.7.x

Description The issue allows privilege escalation from the menu to a root Bash OS shell via the spsshell feature, specifically affecting administrators.

Recommendations For versions prior to 8.1.7.x, update to version 8.1.7.x or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2019-16103

Produtos afetados

Silver Peak Edgeconnect Sd-Wan

Referências · 3

• 🔥 https://github.com/sdnewhop/sdwannewhope/blob/master/reports/Silverpeak%20EdgeConnect%20Multiple%20Vulnerabilities%20-%20032018.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-16103 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-16103 · Aviso do Fabricante