medium6.0
CVE-2020-12143
The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from E…
Impact
The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silver-Peak | Unity Edgeconnect For Amazon Web Services | All versions |
| Silver-Peak | Unity Edgeconnect For Azure | All versions |
| Silver-Peak | Unity Edgeconnect For Google Cloud Platform | All versions |
| Silver-Peak | Unity Orchestrator | before 8.9.2 |
| Silver-Peak | Vx-500 Firmware | All versions |
| Silver-Peak | Vx-1000 Firmware | All versions |
| Silver-Peak | Vx-2000 Firmware | All versions |
| Silver-Peak | Vx-3000 Firmware | All versions |
| Silver-Peak | Vx-5000 Firmware | All versions |
| Silver-Peak | Vx-6000 Firmware | All versions |
| Silver-Peak | Vx-7000 Firmware | All versions |
| Silver-Peak | Vx-9000 Firmware | All versions |