CVE-2019-16102

Vulnerability

The SNMP service in Silver Peak EdgeConnect SD-WAN versions before 8.1.7.x uses default or static public community strings for rocommunity and trapcommunity. This allows unauthorized access to SNMP information. The vulnerability is documented in the referenced analysis [1].

Exploitation

An attacker with network access to the device can query the SNMP service using the well-known public community string (e.g., public). No authentication or user interaction is required. The attacker can issue SNMP GET requests to retrieve system and configuration data.

Impact

Successful exploitation leads to information disclosure, including network topology, device configuration, and system details. This information can aid in further attacks. No remote code execution or privilege escalation is achieved directly.

Mitigation

Upgrade to Silver Peak EdgeConnect SD-WAN version 8.1.7.x or later, which addresses this issue. If upgrade is not immediately possible, restrict SNMP access to trusted hosts via firewall rules or disable the SNMP service entirely.