CVE-2020-12143

The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:silver-peak:unity_edgeconnect_for_amazon_web_services:-:*:*:*:*:*:*:*
cpe:2.3:a:silver-peak:unity_edgeconnect_for_azure:-:*:*:*:*:*:*:*
cpe:2.3:a:silver-peak:unity_edgeconnect_for_google_cloud_platform:-:*:*:*:*:*:*:*
cpe:2.3:a:silver-peak:unity_orchestrator:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:silver-peak:vx-500_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:vx-500:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:silver-peak:vx-1000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:vx-1000:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:silver-peak:vx-2000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:vx-2000:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:silver-peak:vx-3000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:vx-3000:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:silver-peak:vx-5000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:vx-5000:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:silver-peak:vx-6000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:vx-6000:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:silver-peak:vx-7000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:vx-7000:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:silver-peak:vx-9000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:vx-9000:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:silver-peak:vx-8000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:vx-8000:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:silver-peak:nx-700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:nx-700:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:silver-peak:nx-1000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:nx-1000:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:silver-peak:nx-2000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:nx-2000:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:silver-peak:nx-3000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:nx-3000:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:silver-peak:nx-5000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:nx-5000:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:silver-peak:nx-6000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:nx-6000:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:silver-peak:nx-7000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:nx-7000:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:silver-peak:nx-8000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:nx-8000:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:silver-peak:nx-9000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:nx-9000:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:silver-peak:nx-10k_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:nx-10k:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:silver-peak:nx-11k_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silver-peak:nx-11k:-:*:*:*:*:*:*:*

Information

Published : 2020-05-05 13:15

Updated : 2020-05-12 08:59


NVD link : CVE-2020-12143

Mitre link : CVE-2020-12143


JSON object : View

CWE
CWE-295

Improper Certificate Validation

Advertisement

dedicated server usa

Products Affected

silver-peak

  • vx-6000_firmware
  • vx-2000_firmware
  • vx-3000
  • vx-7000_firmware
  • nx-9000_firmware
  • vx-6000
  • vx-9000_firmware
  • nx-8000
  • nx-3000
  • nx-700
  • vx-3000_firmware
  • nx-6000_firmware
  • vx-7000
  • unity_edgeconnect_for_google_cloud_platform
  • vx-5000_firmware
  • nx-3000_firmware
  • vx-500
  • nx-11k
  • vx-9000
  • nx-700_firmware
  • vx-8000_firmware
  • nx-10k_firmware
  • nx-10k
  • unity_orchestrator
  • nx-7000
  • nx-1000_firmware
  • vx-1000
  • nx-9000
  • nx-11k_firmware
  • nx-1000
  • nx-6000
  • nx-5000
  • unity_edgeconnect_for_azure
  • vx-1000_firmware
  • vx-8000
  • vx-500_firmware
  • vx-2000
  • nx-2000_firmware
  • nx-2000
  • nx-8000_firmware
  • nx-5000_firmware
  • vx-5000
  • unity_edgeconnect_for_amazon_web_services
  • nx-7000_firmware