CVE-2019-16099

Vulnerability

Silver Peak EdgeConnect SD-WAN software prior to version 8.1.7.x contains a cross-site request forgery (CSRF) vulnerability that can be triggered when a crafted JSON payload is sent to a Flash (.swf) file [1]. The vulnerability exists because the affected endpoints do not verify the origin of requests.

Exploitation

An attacker can exploit this vulnerability by tricking an authenticated administrator into visiting a malicious webpage or clicking a crafted link that submits a JSON request to the vulnerable .swf endpoint. No additional authentication is required beyond the victim's existing session [1].

Impact

Successful exploitation allows the attacker to perform actions on the SD-WAN management interface with the privileges of the victim administrator. This could lead to unauthorized configuration changes, network disruption, or further compromise of the network infrastructure [1].

Mitigation

Silver Peak has addressed this vulnerability in EdgeConnect SD-WAN version 8.1.7.x and later. Users should upgrade to a fixed version as soon as possible. If upgrading is not feasible, consider restricting access to the management interface and disabling Flash if not required [1].