Known Vulnerabilities for products from Silver-peak
Listed below are 17 of the newest known vulnerabilities associated with the vendor "Silver-peak".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Silver-peak can be found at device.report : Silver-peak
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-12149 json | The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorpo... | 6.8 - MEDIUM | 2020-12-11 | 2023-11-07 |
| CVE-2020-12148 json | A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an ... | 6.8 - MEDIUM | 2020-12-11 | 2023-11-07 |
| CVE-2020-12147 json | In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized... | 8.8 - HIGH | 2020-11-05 | 2020-11-12 |
| CVE-2020-12146 json | In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, a... | 8.8 - HIGH | 2020-11-05 | 2020-11-12 |
| CVE-2020-12145 json | Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API call... | 9.8 - CRITICAL | 2020-11-05 | 2020-11-12 |
| CVE-2020-12144 json | The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible... | 4.9 - MEDIUM | 2020-05-05 | 2023-11-07 |
| CVE-2020-12143 json | The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to... | 4.9 - MEDIUM | 2020-05-05 | 2023-11-07 |
| CVE-2020-12142 json | 1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with ... | 4.9 - MEDIUM | 2020-05-05 | 2023-11-07 |
| CVE-2019-16105 json | Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI. | 4.9 - MEDIUM | 2019-09-08 | 2019-09-09 |
| CVE-2019-16104 json | Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATH_INFO. | 6.1 - MEDIUM | 2019-09-08 | 2019-09-09 |
| CVE-2019-16103 json | Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation (by administrators) from the menu to a root Bash OS... | 7.2 - HIGH | 2019-09-08 | 2020-08-24 |
| CVE-2019-16102 json | Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity. | 9.8 - CRITICAL | 2019-09-08 | 2020-08-24 |
| CVE-2019-16101 json | Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending... | 5.3 - MEDIUM | 2019-09-08 | 2021-07-21 |
| CVE-2019-16100 json | Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side ... | 7.5 - HIGH | 2019-09-08 | 2020-08-24 |
| CVE-2019-16099 json | Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file. | 8.8 - HIGH | 2019-09-08 | 2019-09-09 |
| CVE-2014-2975 json | Cross-site scripting (XSS) vulnerability in php/user_account.php in Silver Peak VX before 6.2.4 allows remote attackers to in... | Not Provided | 2014-07-28 | 2026-05-06 |
| CVE-2014-2974 json | Cross-site request forgery (CSRF) vulnerability in php/user_account.php in Silver Peak VX through 6.2.4 allows remote attacke... | Not Provided | 2014-07-28 | 2026-05-06 |
Known software with vulnerabilities from Silver-peak
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Silver-peak | Ecos | 8.1 |
| Hardware | Silver-peak | Nx-10700 | - |
| Hardware | Silver-peak | Nx-11700 | - |
| Hardware | Silver-peak | Nx-1700 | - |
| Hardware | Silver-peak | Nx-2700 | - |
| Hardware | Silver-peak | Nx-3700 | - |
| Hardware | Silver-peak | Nx-5700 | - |
| Hardware | Silver-peak | Nx-6700 | - |
| Hardware | Silver-peak | Nx-7700 | - |
| Hardware | Silver-peak | Nx-8700 | - |
| Hardware | Silver-peak | Nx-9700 | - |
| Hardware | Silver-peak | Unity Edgeconnect | - |
| Hardware | Silver-peak | Unity Edgeconnect Sd-wan | - |
| Operating System | Silver-peak | Unity Edgeconnect Sd-wan Firmware | 8.1.4.9_65644 |
| Application | Silver-peak | Unity Orchestrator | 8.10 |
| Application | Silver-peak | Vx | 6.2.2.0_47968 |
| Application | Silver-peak | Vx-1000 | - |
| Application | Silver-peak | Vx-2000 | - |
| Application | Silver-peak | Vx-3000 | - |
| Application | Silver-peak | Vx-500 | - |