691 lines
18 KiB
JSON
Raw Normal View History

2023-04-24 12:24:31 +02:00
{
"id": "CVE-2020-12143",
"sourceIdentifier": "sirt@silver-peak.com",
"published": "2020-05-05T20:15:12.137",
"lastModified": "2020-05-12T15:59:17.467",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
"value": "The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator."
},
{
"lang": "es",
"value": "El certificado utilizado para identificar Orchestrator a los dispositivos EdgeConnect no est\u00e1 validado, lo que hace posible que alguien establezca una conexi\u00f3n TLS desde EdgeConnect a un Orchestrator no confiable."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
},
{
"source": "sirt@silver-peak.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 6.0,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 0.5,
"impactScore": 5.5
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-295"
}
]
},
{
"source": "sirt@silver-peak.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-295"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silver-peak:unity_edgeconnect_for_amazon_web_services:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ABAD6DEA-2F2B-41E3-ADCA-08FAC616A88E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silver-peak:unity_edgeconnect_for_azure:-:*:*:*:*:*:*:*",
"matchCriteriaId": "524DEFA6-6381-4ABC-9549-396B1FD60A62"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silver-peak:unity_edgeconnect_for_google_cloud_platform:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0BD97B84-E986-4BD3-BDA0-1B9E13D183F6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:silver-peak:unity_orchestrator:*:*:*:*:*:*:*:*",
"versionEndExcluding": "8.9.2",
"matchCriteriaId": "C770AE97-F96C-45B9-8F5A-F398E5ED9E13"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:vx-500_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CAEC335D-2F77-4E16-BCBE-F805260D4975"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:vx-500:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0EC4F9E5-C854-4BA8-A1D3-4615687F8E9F"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:vx-1000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8B25DCA3-FFE8-4FCF-9C7C-0765F5E35317"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:vx-1000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "19167C6E-9CDC-449C-8410-4447572A488C"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:vx-2000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A5B47D55-3156-4433-A380-B11F5AB2BB3D"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:vx-2000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B6E7064E-D179-4F43-8D40-1ADAC991693F"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:vx-3000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "169A83DF-A052-4EC2-9396-036AA0234C35"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:vx-3000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A6662C3D-9835-460E-A237-E77879AAA1D8"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:vx-5000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C7A7F8C0-969B-430C-8B2B-30BCD3C64400"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:vx-5000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9071CAD4-DC7A-4777-A7EB-C23FCA4513D9"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:vx-6000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DD0BE9A9-FF36-4652-A122-3B3651958DEB"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:vx-6000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D46408C1-4C24-4EF8-93BD-D222CD9797CE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:vx-7000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EEFF5265-88F8-4637-BD72-6D7A19631ED2"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:vx-7000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3135655B-9060-4C16-92F1-8FDE67DE85C0"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:vx-9000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BC60C235-7BA2-48C2-B6B4-3099AA271E5F"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:vx-9000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "15239951-4008-4CB9-B76C-5BFEFD20ACD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:vx-8000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "02B86CCA-4367-44F9-A915-245532D799B4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:vx-8000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "90074926-F3A3-4149-8776-7DDA42027E69"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:nx-700_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "67036359-5CEC-43E8-9436-90D82DBC23D1"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:nx-700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6C2B1C20-B2FF-43A3-9587-DB383984AC43"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:nx-1000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DFC3B48D-74BF-422D-97C3-5EF3442DB315"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:nx-1000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "13EEB96E-A3EB-4D6B-AABE-D7C0FC3F6D34"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:nx-2000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "110F488B-2169-41BE-A4B0-001D33F71C83"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:nx-2000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BC2D2066-1FFB-4A10-8AE4-2B02F0821D10"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:nx-3000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F2B50FEA-3BA8-4E42-A618-36D7524B5D06"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:nx-3000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4519445D-E234-45D7-8E29-686357C01358"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:nx-5000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A61BA34E-C1DA-4E1A-969B-88BABDD237AE"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:nx-5000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "052A174B-4B0A-4EFE-AEF0-DC96C0858CBD"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:nx-6000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "051A9816-3175-424F-AC08-B3D3726CFFED"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:nx-6000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EF255E2E-1646-46C6-9B37-7EBE977353B4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:nx-7000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FBEEB980-A456-4EC2-9254-24CB59AD1CAB"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:nx-7000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1E371CCC-776D-488D-8361-4A3E7C67F9D7"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:nx-8000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9A607F5E-CC24-4732-BBBD-A42316620F77"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:nx-8000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "081DD345-696C-4E07-8490-EE44ADBC6158"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:nx-9000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8B21BB8F-B8AC-4595-8CDE-984651FB87B0"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:nx-9000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5DC9A67E-E0F3-468E-848F-63BEBAFBC79B"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:nx-10k_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D017AD85-C92F-4F47-8442-66E2B3F5DF0C"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:nx-10k:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B6D63036-5201-4536-A9B3-51886201EBC1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:silver-peak:nx-11k_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5D60F6AB-1DC2-4E0C-AFE5-3D5E2E5EB252"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:silver-peak:nx-11k:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18E63529-8CC9-4DA4-B0E6-911F8479F949"
}
]
}
]
}
],
"references": [
{
"url": "https://www.silver-peak.com/sites/default/files/advisory/security_advisory_notice_rogue_orchestrator-cve_2020_12143.pdf",
"source": "sirt@silver-peak.com",
"tags": [
"Vendor Advisory"
]
}
]
}