CVE-2020-12142
Summary
| CVE | CVE-2020-12142 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-05-05 20:15:00 UTC |
| Updated | 2023-11-07 21:16:00 UTC |
| Description | 1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative access and shell access to the EdgeConnect appliance. An admin user can access IPSec seed and nonce parameters using the CLI, REST APIs, and the Linux shell. |
Risk And Classification
Problem Types: CWE-668
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Arubanetworks | Nx-1000 | - | All | All | All |
| Hardware | Arubanetworks | Nx-10k | - | All | All | All |
| Hardware | Arubanetworks | Nx-11k | - | All | All | All |
| Hardware | Arubanetworks | Nx-2000 | - | All | All | All |
| Hardware | Arubanetworks | Nx-3000 | - | All | All | All |
| Hardware | Arubanetworks | Nx-5000 | - | All | All | All |
| Hardware | Arubanetworks | Nx-6000 | - | All | All | All |
| Hardware | Arubanetworks | Nx-700 | - | All | All | All |
| Hardware | Arubanetworks | Nx-7000 | - | All | All | All |
| Hardware | Arubanetworks | Nx-8000 | - | All | All | All |
| Hardware | Arubanetworks | Nx-9000 | - | All | All | All |
| Hardware | Arubanetworks | Vx-1000 | - | All | All | All |
| Hardware | Arubanetworks | Vx-2000 | - | All | All | All |
| Hardware | Arubanetworks | Vx-3000 | - | All | All | All |
| Hardware | Arubanetworks | Vx-500 | - | All | All | All |
| Hardware | Arubanetworks | Vx-5000 | - | All | All | All |
| Hardware | Arubanetworks | Vx-6000 | - | All | All | All |
| Hardware | Arubanetworks | Vx-7000 | - | All | All | All |
| Hardware | Arubanetworks | Vx-8000 | - | All | All | All |
| Hardware | Arubanetworks | Vx-9000 | - | All | All | All |
| Hardware | Silver-peak | Nx-1000 | - | All | All | All |
| Hardware | Silver-peak | Nx-1000 | - | All | All | All |
| Operating System | Silver-peak | Nx-1000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Nx-1000 Firmware | - | All | All | All |
| Hardware | Silver-peak | Nx-10k | - | All | All | All |
| Hardware | Silver-peak | Nx-10k | - | All | All | All |
| Operating System | Silver-peak | Nx-10k Firmware | - | All | All | All |
| Operating System | Silver-peak | Nx-10k Firmware | - | All | All | All |
| Hardware | Silver-peak | Nx-11k | - | All | All | All |
| Hardware | Silver-peak | Nx-11k | - | All | All | All |
| Operating System | Silver-peak | Nx-11k Firmware | - | All | All | All |
| Operating System | Silver-peak | Nx-11k Firmware | - | All | All | All |
| Hardware | Silver-peak | Nx-2000 | - | All | All | All |
| Hardware | Silver-peak | Nx-2000 | - | All | All | All |
| Operating System | Silver-peak | Nx-2000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Nx-2000 Firmware | - | All | All | All |
| Hardware | Silver-peak | Nx-3000 | - | All | All | All |
| Hardware | Silver-peak | Nx-3000 | - | All | All | All |
| Operating System | Silver-peak | Nx-3000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Nx-3000 Firmware | - | All | All | All |
| Hardware | Silver-peak | Nx-5000 | - | All | All | All |
| Hardware | Silver-peak | Nx-5000 | - | All | All | All |
| Operating System | Silver-peak | Nx-5000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Nx-5000 Firmware | - | All | All | All |
| Hardware | Silver-peak | Nx-6000 | - | All | All | All |
| Hardware | Silver-peak | Nx-6000 | - | All | All | All |
| Operating System | Silver-peak | Nx-6000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Nx-6000 Firmware | - | All | All | All |
| Hardware | Silver-peak | Nx-700 | - | All | All | All |
| Hardware | Silver-peak | Nx-700 | - | All | All | All |
| Hardware | Silver-peak | Nx-7000 | - | All | All | All |
| Hardware | Silver-peak | Nx-7000 | - | All | All | All |
| Operating System | Silver-peak | Nx-7000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Nx-7000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Nx-700 Firmware | - | All | All | All |
| Operating System | Silver-peak | Nx-700 Firmware | - | All | All | All |
| Hardware | Silver-peak | Nx-8000 | - | All | All | All |
| Hardware | Silver-peak | Nx-8000 | - | All | All | All |
| Operating System | Silver-peak | Nx-8000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Nx-8000 Firmware | - | All | All | All |
| Hardware | Silver-peak | Nx-9000 | - | All | All | All |
| Hardware | Silver-peak | Nx-9000 | - | All | All | All |
| Operating System | Silver-peak | Nx-9000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Nx-9000 Firmware | - | All | All | All |
| Application | Silver-peak | Unity Edgeconnect For Amazon Web Services | - | All | All | All |
| Application | Silver-peak | Unity Edgeconnect For Amazon Web Services | - | All | All | All |
| Application | Silver-peak | Unity Edgeconnect For Azure | - | All | All | All |
| Application | Silver-peak | Unity Edgeconnect For Azure | - | All | All | All |
| Application | Silver-peak | Unity Edgeconnect For Google Cloud Platform | - | All | All | All |
| Application | Silver-peak | Unity Edgeconnect For Google Cloud Platform | - | All | All | All |
| Application | Silver-peak | Unity Orchestrator | All | All | All | All |
| Application | Silver-peak | Unity Orchestrator | All | All | All | All |
| Hardware | Silver-peak | Vx-1000 | - | All | All | All |
| Hardware | Silver-peak | Vx-1000 | - | All | All | All |
| Operating System | Silver-peak | Vx-1000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Vx-1000 Firmware | - | All | All | All |
| Hardware | Silver-peak | Vx-2000 | - | All | All | All |
| Hardware | Silver-peak | Vx-2000 | - | All | All | All |
| Operating System | Silver-peak | Vx-2000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Vx-2000 Firmware | - | All | All | All |
| Hardware | Silver-peak | Vx-3000 | - | All | All | All |
| Hardware | Silver-peak | Vx-3000 | - | All | All | All |
| Operating System | Silver-peak | Vx-3000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Vx-3000 Firmware | - | All | All | All |
| Hardware | Silver-peak | Vx-500 | - | All | All | All |
| Hardware | Silver-peak | Vx-500 | - | All | All | All |
| Hardware | Silver-peak | Vx-5000 | - | All | All | All |
| Hardware | Silver-peak | Vx-5000 | - | All | All | All |
| Operating System | Silver-peak | Vx-5000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Vx-5000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Vx-500 Firmware | - | All | All | All |
| Operating System | Silver-peak | Vx-500 Firmware | - | All | All | All |
| Hardware | Silver-peak | Vx-6000 | - | All | All | All |
| Hardware | Silver-peak | Vx-6000 | - | All | All | All |
| Operating System | Silver-peak | Vx-6000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Vx-6000 Firmware | - | All | All | All |
| Hardware | Silver-peak | Vx-7000 | - | All | All | All |
| Hardware | Silver-peak | Vx-7000 | - | All | All | All |
| Operating System | Silver-peak | Vx-7000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Vx-7000 Firmware | - | All | All | All |
| Hardware | Silver-peak | Vx-8000 | - | All | All | All |
| Hardware | Silver-peak | Vx-8000 | - | All | All | All |
| Operating System | Silver-peak | Vx-8000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Vx-8000 Firmware | - | All | All | All |
| Hardware | Silver-peak | Vx-9000 | - | All | All | All |
| Hardware | Silver-peak | Vx-9000 | - | All | All | All |
| Operating System | Silver-peak | Vx-9000 Firmware | - | All | All | All |
| Operating System | Silver-peak | Vx-9000 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.silver-peak.com/sites/default/files/advisory/security_advisory_notice_ipsec_u... | CONFIRM | www.silver-peak.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: This vulnerability was reported to Silver Peak by Denis Kolegov, Mariya Nedyak, and Anton Nikolaev from the SD-WAN New Hop team.
There are currently no legacy QID mappings associated with this CVE.