Silver-peak vulnerabilities

Products

• Unity Edgeconnect Sd-wan Firmware 7
• Unity Orchestrator 6
• Nx-1000 Firmware 3
• Nx-10k Firmware 3
• Nx-11k Firmware 3
• Nx-2000 Firmware 3
• Nx-3000 Firmware 3
• Nx-5000 Firmware 3
• Nx-6000 Firmware 3
• Nx-7000 Firmware 3
• Nx-700 Firmware 3
• Nx-8000 Firmware 3
• Nx-9000 Firmware 3
• Unity Edgeconnect For Amazon Web Services 3
• Unity Edgeconnect For Azure 3
• Unity Edgeconnect For Google Cloud Platform 3
• Vx-1000 Firmware 3
• Vx-2000 Firmware 3
• Vx-3000 Firmware 3
• Vx-5000 Firmware 3
• Vx-500 Firmware 3
• Vx-6000 Firmware 3
• Vx-7000 Firmware 3
• Vx-8000 Firmware 3
• Vx-9000 Firmware 3
• Vx 2

Newest

• silver peak systems, inc. unity orchestrator Silver Peak Unity OrchestratorTM subject to path traversal. CVE-2020-12146 EPSS 27.6% 6.6 MediumNovember 5, 2020
• silver peak systems, inc. unity orchestrator Unauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database. CVE-2020-12147 6.6 MediumNovember 5, 2020
• silver peak systems, inc. unity orchestrator Silver Peak Unity OrchestratorTM authentication can be subverted through manipulation of HTTP headers. CVE-2020-12145 6.6 MediumNovember 5, 2020
• silver peak systems, inc. 1. unity edgeconnect, nx, vx 2. unity orchestrator,   3. edgeconnect in aws, azure, gcp, silver-peak nx-1000 firmware, nx-10k firmware +22 more +24 more IPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentials CVE-2020-12142 4.8 MediumMay 5, 2020
• silver peak systems, inc. 1. unity edgeconnect, nx, vx 2. unity orchestrator  3. edgeconnect in aws, azure, gcp, silver-peak nx-1000 firmware, nx-10k firmware +22 more +24 more The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated CVE-2020-12144 6.0 MediumMay 5, 2020
• silver peak systems, inc. 1. unity edgeconnect, nx, vx 2. unity orchestrator,   3. edgeconnect in aws, azure, gcp, silver-peak nx-1000 firmware, nx-10k firmware +22 more +24 more The certificate used to identify Orchestrator to EdgeConnect devices is not validated CVE-2020-12143 6.0 MediumMay 5, 2020
• silver-peak unity edgeconnect sd-wan firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file. CVE-2019-16099 8.8 HighSeptember 8, 2019
• silver-peak unity edgeconnect sd-wan firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface... CVE-2019-16100 7.5 HighSeptember 8, 2019
• silver-peak unity edgeconnect sd-wan firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially... CVE-2019-16101 5.3 MediumSeptember 8, 2019
• silver-peak unity edgeconnect sd-wan firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for... CVE-2019-16102 9.8 CriticalSeptember 8, 2019
• silver-peak unity edgeconnect sd-wan firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation (by administrators)... CVE-2019-16103 7.2 HighSeptember 8, 2019
• silver-peak unity edgeconnect sd-wan firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb... CVE-2019-16104 6.1 MediumSeptember 8, 2019
• silver-peak unity edgeconnect sd-wan firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json... CVE-2019-16105 4.9 MediumSeptember 8, 2019
• silver-peak vx Cross-site scripting (XSS) vulnerability in php/user_account.php in Silver Peak VX before 6.2.4... CVE-2014-2975 4.3 MediumJuly 28, 2014
• silver-peak vx Cross-site request forgery (CSRF) vulnerability in php/user_account.php in Silver Peak VX through... CVE-2014-2974 6.8 MediumJuly 28, 2014