CVE-2020-12149
Published Dec 11, 2020The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config filename in a subseque…
Vendor/product archive
arubanetworks / vx-2000 CVEs
Beta · best-effort5 CVEs tagged to arubanetworks / vx-2000 — 0 Critical, 0 High, 5 Medium, 0 Low, 0 Unrated.
CVE-2020-12148
Published Dec 11, 2020A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary commands with the privil…
CVE-2020-12144
Published May 5, 2020The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeCo…
CVE-2020-12143
Published May 5, 2020The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an unt…
CVE-2020-12142
Published May 5, 20201. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required syst…
Showing 1-5 of 5 CVEsPage 1 of 1