medium6.0
CVE-2020-12144
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated.
Impact
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silver-Peak | Unity Edgeconnect For Amazon Web Services | All versions |
| Silver-Peak | Unity Edgeconnect For Azure | All versions |
| Silver-Peak | Unity Edgeconnect For Google Cloud Platform | All versions |
| Silver-Peak | Unity Orchestrator | before 8.9.2 |
| Silver-Peak | Vx-500 Firmware | All versions |
| Silver-Peak | Vx-1000 Firmware | All versions |
| Silver-Peak | Vx-2000 Firmware | All versions |
| Silver-Peak | Vx-3000 Firmware | All versions |
| Silver-Peak | Vx-5000 Firmware | All versions |
| Silver-Peak | Vx-6000 Firmware | All versions |
| Silver-Peak | Vx-7000 Firmware | All versions |
| Silver-Peak | Vx-9000 Firmware | All versions |