VDB

CVE-2020-12143

CVE-2020-12143 PUBLISHED CVSS 6 MEDIUM

The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator.

EPSS 0.33% · 27.0th percentile

Risk Scores

CVSS 3.1
6
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H
EPSS Score
0.33%
27.0th percentile

Affected Products

VendorProductVersions
silver-peakunity_orchestrator0
Silver Peak Systems, Inc.1. Unity EdgeConnect, NX, VX 2. Unity Orchestrator,   3. EdgeConnect in AWS, Azure, GCPAll versions affected prior to Silver Peak Unity ECOS™ 8.3.2+, 8.1.9.12+ and Silver Peak Unity Orchestrator™ 8.9.2+
silver-peakunity_edgeconnect_for_azure
silver-peaknx-5000_firmware
silver-peakvx-7000_firmware
silver-peakvx-500_firmware
silver-peaknx-6000_firmware
silver-peakvx-5000_firmware
silver-peaknx-3000_firmware
silver-peaknx-8000_firmware
silver-peakvx-2000_firmware
silver-peakunity_edgeconnect_for_google_cloud_platform
silver-peakvx-6000_firmware
silver-peakvx-9000_firmware
silver-peaknx-700_firmware
silver-peakvx-3000_firmware
silver-peaknx-7000_firmware
silver-peaknx-1000_firmware
silver-peakvx-1000_firmware
silver-peaknx-11k_firmware

…and 5 more

Timeline

  • May 5, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Oct 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 1, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 3, 2022 EPSS Score
  • Jul 5, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›