VulnerabilityModified
CVE-2020-12144
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated.
MEDIUM 4.9EPSS 0.34%
Does this matter?
Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.
Description
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal.
- CVSS 3.1
- 4.9 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 0.34% probability · 27th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-295
- Affected
- silver-peak/unity edgeconnect for amazon web services · silver-peak/unity edgeconnect for azure · silver-peak/unity edgeconnect for google cloud platform · silver-peak/unity orchestrator · silver-peak/vx-500 firmware · silver-peak/vx-1000 firmware · silver-peak/vx-2000 firmware · silver-peak/vx-3000 firmware · silver-peak/vx-5000 firmware · silver-peak/vx-6000 firmware · silver-peak/vx-7000 firmware · silver-peak/vx-9000 firmware · silver-peak/vx-8000 firmware · silver-peak/nx-700 firmware · silver-peak/nx-1000 firmware · silver-peak/nx-2000 firmware · silver-peak/nx-3000 firmware · silver-peak/nx-5000 firmware · silver-peak/nx-6000 firmware · silver-peak/nx-7000 firmware · +4 more
- Source
- sirt@silver-peak.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.