sirt@silver-peak.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS sirt@silver-peak.com
03
assessed vulnerabilities (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-12149US | medium6.8 | — | ||
The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config filename in a subsequen… | ||||
| CVE-2020-12148US | medium6.8 | — | ||
A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary commands with the privile… | ||||
| CVE-2020-12147US | high8.8 | — | ||
In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries against the Orchestrator database using… | ||||
| CVE-2020-12146US | high8.8 | — | ||
In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server u… | ||||
| CVE-2020-12145US | critical9.8 | — | ||
Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhost. This makes it possible to log in to O… | ||||
| CVE-2020-12144US | medium4.9 | — | ||
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeCon… | ||||
| CVE-2020-12143US | medium4.9 | — | ||
The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untr… | ||||
| CVE-2020-12142US | medium4.9 | — | ||
1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required syste… | ||||