CVSS 3.1
4.9 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:NCVE-2020-12144
Medium (4.9) in silver-peak. EPSS 0.3% chance of exploitation in the next 30 days.
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
- CWE
- CWE-295
- Published
- Modified
- Record from
- the NVD, synced
Affected
- silver-peak:nx-1000_firmware
- silver-peak:nx-10k_firmware
- silver-peak:nx-11k_firmware
- silver-peak:nx-2000_firmware
- silver-peak:nx-3000_firmware
- silver-peak:nx-5000_firmware
- silver-peak:nx-6000_firmware
- silver-peak:nx-7000_firmware
- silver-peak:nx-700_firmware
- silver-peak:nx-8000_firmware
- silver-peak:nx-9000_firmware
- silver-peak:unity_edgeconnect_for_amazon_web_services
- silver-peak:unity_edgeconnect_for_azure
- silver-peak:unity_edgeconnect_for_google_cloud_platform
- silver-peak:unity_orchestrator
- silver-peak:vx-1000_firmware
- silver-peak:vx-2000_firmware
- silver-peak:vx-3000_firmware
- silver-peak:vx-5000_firmware
- silver-peak:vx-500_firmware
- silver-peak:vx-6000_firmware
- silver-peak:vx-7000_firmware
- silver-peak:vx-8000_firmware
- silver-peak:vx-9000_firmware