ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-12143

—
CVSS 3.1
4.9 medium
EPSS
<1%p26
Published
()
Modified
Description

The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator.

Vendors
silver-peak
Products
unity edgeconnect for amazon web services, unity edgeconnect for azure, unity edgeconnect for google cloud platform, unity orchestrator, vx-500 firmware, vx-1000 firmware, vx-2000 firmware, vx-3000 firmware, vx-5000 firmware, vx-6000 firmware, vx-7000 firmware, vx-9000 firmware
Weakness
CWE-295
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.