CVE-2020-12149

🗓️ 11 Dec 2020 15:23:32Reported by Silver PeakType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 43 Views

Silver Peak Unity ECOSTM (ECOS) appliance software configuration backup/restore function vulnerable to OS command injection

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2020-12149	11 Dec 202018:37	–	circl
CNNVD	Silver Peak Unity ECOSTM OS Command Injection Vulnerability	11 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-12149 OS Command Injection - Management File Upload	11 Dec 202015:23	–	cvelist
EUVD	EUVD-2020-4464	7 Oct 202500:30	–	euvd
NVD	CVE-2020-12149	11 Dec 202016:15	–	nvd
OSV	CVE-2020-12149	11 Dec 202016:15	–	osv
Prion	Command injection	11 Dec 202016:15	–	prion
Positive Technologies	PT-2020-13067 · Silver Peak · Orchestrator +1	11 Dec 202000:00	–	ptsecurity

NVD

Node

arubanetworks edgeconnect_enterpriseRange8.1–8.1.9.15

arubanetworks edgeconnect_enterpriseRange8.3.0–8.3.0.8

arubanetworks edgeconnect_enterpriseRange8.3.1–8.3.1.2

arubanetworks edgeconnect_enterpriseRange9.0–9.0.2.0

AND

arubanetworks vx-1000Match-

arubanetworks vx-2000Match-

arubanetworks vx-3000Match-

arubanetworks vx-500Match-

arubanetworks vx-5000Match-

arubanetworks vx-6000Match-

arubanetworks vx-7000Match-

arubanetworks vx-8000Match-

arubanetworks vx-9000Match-

arubanetworks nx-10700Match-

arubanetworks nx-11700Match-

arubanetworks nx-1700Match-

arubanetworks nx-2700Match-

arubanetworks nx-3700Match-

arubanetworks nx-5700Match-

arubanetworks nx-6700Match-

arubanetworks nx-700Match-

arubanetworks nx-7700Match-

arubanetworks nx-8700Match-

arubanetworks nx-9700Match-

silver-peak unity_edgeconnectMatch-

[
  {
    "product": "ECOS",
    "vendor": "Silver Peak Systems, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "All current ECOS versions prior to 8.1.9.15"
      },
      {
        "status": "affected",
        "version": "8.3.0.8"
      },
      {
        "status": "affected",
        "version": "8.3.1.2"
      },
      {
        "status": "affected",
        "version": "8.3.2.0"
      },
      {
        "status": "affected",
        "version": "9.0.2.0"
      },
      {
        "status": "affected",
        "version": "and 9.1.0.0"
      }
    ]
  }
]

Source	Link
silver-peak	www.silver-peak.com/support/user-documentation/security-advisories

12 Dec 2024 18:27Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.8

CVSS 28.5

EPSS0.00373

CWE-78