CVE-2020-12142

🗓️ 05 May 2020 19:54:07Reported by Silver PeakType

IPSec UDP key material retrieval vulnerability on EdgeConnect applianc

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2020-12142 IPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentials	5 May 202019:54	–	cvelist
EUVD	EUVD-2020-4457	7 Oct 202500:30	–	euvd
NVD	CVE-2020-12142	5 May 202020:15	–	nvd
Prion	Design/Logic Flaw	5 May 202020:15	–	prion
Positive Technologies	PT-2020-13061 · Riverbed · Edgeconnect Appliance	5 May 202000:00	–	ptsecurity
RedhatCVE	CVE-2020-12142	9 Jan 202609:07	–	redhatcve

NVD

Node

silver-peak unity_edgeconnect_for_amazon_web_servicesMatch-

silver-peak unity_edgeconnect_for_azureMatch-

silver-peak unity_edgeconnect_for_google_cloud_platformMatch-

silver-peak unity_orchestratorRange<8.9.2

Node

silver-peak vx-500_firmwareMatch-

AND

arubanetworks vx-500Match-

Node

silver-peak vx-1000_firmwareMatch-

AND

arubanetworks vx-1000Match-

Node

silver-peak vx-2000_firmwareMatch-

AND

arubanetworks vx-2000Match-

Node

silver-peak vx-3000_firmwareMatch-

AND

arubanetworks vx-3000Match-

Node

silver-peak vx-5000_firmwareMatch-

AND

arubanetworks vx-5000Match-

Node

silver-peak vx-6000_firmwareMatch-

AND

arubanetworks vx-6000Match-

Node

silver-peak vx-7000_firmwareMatch-

AND

arubanetworks vx-7000Match-

Node

silver-peak vx-9000_firmwareMatch-

AND

arubanetworks vx-9000Match-

Node

silver-peak vx-8000_firmwareMatch-

AND

arubanetworks vx-8000Match-

Node

silver-peak nx-700_firmwareMatch-

AND

arubanetworks nx-700Match-

Node

silver-peak nx-1000_firmwareMatch-

AND

arubanetworks nx-1000Match-

Node

silver-peak nx-2000_firmwareMatch-

AND

arubanetworks nx-2000Match-

Node

silver-peak nx-3000_firmwareMatch-

AND

arubanetworks nx-3000Match-

Node

silver-peak nx-5000_firmwareMatch-

AND

arubanetworks nx-5000Match-

Node

silver-peak nx-6000_firmwareMatch-

AND

arubanetworks nx-6000Match-

Node

silver-peak nx-7000_firmwareMatch-

AND

arubanetworks nx-7000Match-

Node

silver-peak nx-8000_firmwareMatch-

AND

arubanetworks nx-8000Match-

Node

silver-peak nx-9000_firmwareMatch-

AND

arubanetworks nx-9000Match-

Node

silver-peak nx-10k_firmwareMatch-

AND

arubanetworks nx-10kMatch-

Node

silver-peak nx-11k_firmwareMatch-

AND

arubanetworks nx-11kMatch-

[
  {
    "product": "1. Unity EdgeConnect, NX, VX 2. Unity Orchestrator,   3. EdgeConnect in AWS, Azure, GCP",
    "vendor": "Silver Peak Systems, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "All versions affected prior to Silver Peak Unity ECOS™ 8.3.2+, 8.1.9.12+ and Silver Peak Unity Orchestrator™ 8.9.2+"
      }
    ]
  }
]

Source	Link
silver-peak	www.silver-peak.com/sites/default/files/advisory/security_advisory_notice_ipsec_udp_key_material-cve_2020_12142.pdf

21 Nov 2024 04:59Current

5Medium risk

Vulners AI Score5

CVSS 24

CVSS 3.14.8 - 4.9

EPSS0.00215

CWE-668