{"id":"CVE-2020-12142","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-12142","generatedAt":"2026-10-27T22:25:58.017Z","title":"The vulnerability requires administrative access and shell access to the EdgeConnect appliance.","description":"1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative access and shell access to the EdgeConnect appliance. An admin user can access IPSec seed and nonce parameters using the CLI, REST APIs, and the Linux shell.","published":"2020-05-05T20:15:12.000Z","lastModified":"2026-06-17T02:51:29.000Z","status":"Modified","sourceIdentifier":"sirt@silver-peak.com","cvss":{"version":"3.1","score":4.9,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-668"],"affected":["silver-peak/unity edgeconnect for amazon web services","silver-peak/unity edgeconnect for azure","silver-peak/unity edgeconnect for google cloud platform","silver-peak/unity orchestrator","silver-peak/vx-500 firmware","silver-peak/vx-1000 firmware","silver-peak/vx-2000 firmware","silver-peak/vx-3000 firmware","silver-peak/vx-5000 firmware","silver-peak/vx-6000 firmware","silver-peak/vx-7000 firmware","silver-peak/vx-9000 firmware","silver-peak/vx-8000 firmware","silver-peak/nx-700 firmware","silver-peak/nx-1000 firmware","silver-peak/nx-2000 firmware","silver-peak/nx-3000 firmware","silver-peak/nx-5000 firmware","silver-peak/nx-6000 firmware","silver-peak/nx-7000 firmware","silver-peak/nx-8000 firmware","silver-peak/nx-9000 firmware","silver-peak/nx-10k firmware","silver-peak/nx-11k firmware"],"epss":{"score":0.00722,"percentile":0.537,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.72%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.silver-peak.com/sites/default/files/advisory/security_advisory_notice_ipsec_udp_key_material-cve_2020_12142.pdf","tags":["Vendor Advisory"],"source":"sirt@silver-peak.com"},{"url":"https://www.silver-peak.com/sites/default/files/advisory/security_advisory_notice_ipsec_udp_key_material-cve_2020_12142.pdf","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-12142","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}