CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-12142

1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative access and shell access to the EdgeConnect appliance. An admin user can access IPSec seed and nonce parameters using the CLI, REST APIs, and the Linux shell.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 53.4%

CVSS Severity

CVSS v3 Score 4.8

CVSS v2 Score 4.0

References

Products affected by CVE-2020-12142

Silver-Peak » Unity Edgeconnect For Amazon Web Services » Version: N/A

cpe:2.3:a:silver-peak:unity_edgeconnect_for_amazon_web_services:-
Silver-Peak » Unity Edgeconnect For Azure » Version: N/A

cpe:2.3:a:silver-peak:unity_edgeconnect_for_azure:-
Silver-Peak » Unity Edgeconnect For Google Cloud Platform » Version: N/A

cpe:2.3:a:silver-peak:unity_edgeconnect_for_google_cloud_platform:-
Silver-Peak » Unity Orchestrator » Version: N/A

cpe:2.3:a:silver-peak:unity_orchestrator:-
Silver-Peak » Unity Orchestrator » Version: 6

cpe:2.3:a:silver-peak:unity_orchestrator:6
Silver-Peak » Unity Orchestrator » Version: 6.2

cpe:2.3:a:silver-peak:unity_orchestrator:6.2
Silver-Peak » Unity Orchestrator » Version: 7.3

cpe:2.3:a:silver-peak:unity_orchestrator:7.3
Silver-Peak » Unity Orchestrator » Version: 8

cpe:2.3:a:silver-peak:unity_orchestrator:8
Silver-Peak » Unity Orchestrator » Version: 8.1

cpe:2.3:a:silver-peak:unity_orchestrator:8.1
Silver-Peak » Unity Orchestrator » Version: 8.5

cpe:2.3:a:silver-peak:unity_orchestrator:8.5
Silver-Peak » Unity Orchestrator » Version: 8.6

cpe:2.3:a:silver-peak:unity_orchestrator:8.6
Silver-Peak » Unity Orchestrator » Version: 8.7

cpe:2.3:a:silver-peak:unity_orchestrator:8.7
Silver-Peak » Unity Orchestrator » Version: 8.8

cpe:2.3:a:silver-peak:unity_orchestrator:8.8
Arubanetworks » Nx-1000 » Version: N/A

cpe:2.3:h:arubanetworks:nx-1000:-
Arubanetworks » Nx-10k » Version: N/A

cpe:2.3:h:arubanetworks:nx-10k:-
Arubanetworks » Nx-11k » Version: N/A

cpe:2.3:h:arubanetworks:nx-11k:-
Arubanetworks » Nx-2000 » Version: N/A

cpe:2.3:h:arubanetworks:nx-2000:-
Arubanetworks » Nx-3000 » Version: N/A

cpe:2.3:h:arubanetworks:nx-3000:-
Arubanetworks » Nx-5000 » Version: N/A

cpe:2.3:h:arubanetworks:nx-5000:-
Arubanetworks » Nx-6000 » Version: N/A

cpe:2.3:h:arubanetworks:nx-6000:-
Arubanetworks » Nx-7000 » Version: N/A

cpe:2.3:h:arubanetworks:nx-7000:-
Arubanetworks » Nx-700 » Version: N/A

cpe:2.3:h:arubanetworks:nx-700:-
Arubanetworks » Nx-8000 » Version: N/A

cpe:2.3:h:arubanetworks:nx-8000:-
Arubanetworks » Nx-9000 » Version: N/A

cpe:2.3:h:arubanetworks:nx-9000:-
Arubanetworks » Vx-1000 » Version: N/A

cpe:2.3:h:arubanetworks:vx-1000:-
Arubanetworks » Vx-2000 » Version: N/A

cpe:2.3:h:arubanetworks:vx-2000:-
Arubanetworks » Vx-3000 » Version: N/A

cpe:2.3:h:arubanetworks:vx-3000:-
Arubanetworks » Vx-5000 » Version: N/A

cpe:2.3:h:arubanetworks:vx-5000:-
Arubanetworks » Vx-500 » Version: N/A

cpe:2.3:h:arubanetworks:vx-500:-
Arubanetworks » Vx-6000 » Version: N/A

cpe:2.3:h:arubanetworks:vx-6000:-
Arubanetworks » Vx-7000 » Version: N/A

cpe:2.3:h:arubanetworks:vx-7000:-
Arubanetworks » Vx-8000 » Version: N/A

cpe:2.3:h:arubanetworks:vx-8000:-
Arubanetworks » Vx-9000 » Version: N/A

cpe:2.3:h:arubanetworks:vx-9000:-
Silver-Peak » Nx-1000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:nx-1000_firmware:-
Silver-Peak » Nx-10k Firmware » Version: N/A

cpe:2.3:o:silver-peak:nx-10k_firmware:-
Silver-Peak » Nx-11k Firmware » Version: N/A

cpe:2.3:o:silver-peak:nx-11k_firmware:-
Silver-Peak » Nx-2000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:nx-2000_firmware:-
Silver-Peak » Nx-3000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:nx-3000_firmware:-
Silver-Peak » Nx-5000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:nx-5000_firmware:-
Silver-Peak » Nx-6000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:nx-6000_firmware:-
Silver-Peak » Nx-7000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:nx-7000_firmware:-
Silver-Peak » Nx-700 Firmware » Version: N/A

cpe:2.3:o:silver-peak:nx-700_firmware:-
Silver-Peak » Nx-8000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:nx-8000_firmware:-
Silver-Peak » Nx-9000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:nx-9000_firmware:-
Silver-Peak » Vx-1000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:vx-1000_firmware:-
Silver-Peak » Vx-2000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:vx-2000_firmware:-
Silver-Peak » Vx-3000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:vx-3000_firmware:-
Silver-Peak » Vx-5000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:vx-5000_firmware:-
Silver-Peak » Vx-500 Firmware » Version: N/A

cpe:2.3:o:silver-peak:vx-500_firmware:-
Silver-Peak » Vx-6000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:vx-6000_firmware:-
Silver-Peak » Vx-7000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:vx-7000_firmware:-
Silver-Peak » Vx-8000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:vx-8000_firmware:-
Silver-Peak » Vx-9000 Firmware » Version: N/A

cpe:2.3:o:silver-peak:vx-9000_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-12142

Products

Pricing

Contact Us