CVE-2020-12142: Silver-Peak NX-1000 Firmware

Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days.

1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative access and shell access to the EdgeConnect appliance. An admin user can access IPSec seed and nonce parameters using the CLI, REST APIs, and the Linux shell.

Affected products

  • Silver-Peak NX-1000 Firmware: affected versions not specified
  • Silver-Peak NX-10k Firmware: affected versions not specified
  • Silver-Peak NX-11k Firmware: affected versions not specified
  • Silver-Peak NX-2000 Firmware: affected versions not specified
  • Silver-Peak NX-3000 Firmware: affected versions not specified
  • Silver-Peak NX-5000 Firmware: affected versions not specified
  • Silver-Peak NX-6000 Firmware: affected versions not specified
  • Silver-Peak NX-7000 Firmware: affected versions not specified
  • Silver-Peak NX-700 Firmware: affected versions not specified
  • Silver-Peak NX-8000 Firmware: affected versions not specified
  • Silver-Peak NX-9000 Firmware: affected versions not specified
  • Silver-Peak Unity Edgeconnect For Amazon Web Services: affected versions not specified
  • Silver-Peak Unity Edgeconnect For Azure: affected versions not specified
  • Silver-Peak Unity Edgeconnect For Google Cloud Platform: affected versions not specified
  • Silver-Peak Unity Orchestrator: before 8.9.2 (fixed in 8.9.2)
  • Silver-Peak Vx-1000 Firmware: affected versions not specified
  • Silver-Peak Vx-2000 Firmware: affected versions not specified
  • Silver-Peak Vx-3000 Firmware: affected versions not specified
  • Silver-Peak Vx-5000 Firmware: affected versions not specified
  • Silver-Peak Vx-500 Firmware: affected versions not specified
  • Silver-Peak Vx-6000 Firmware: affected versions not specified
  • Silver-Peak Vx-7000 Firmware: affected versions not specified
  • Silver-Peak Vx-8000 Firmware: affected versions not specified
  • Silver-Peak Vx-9000 Firmware: affected versions not specified

Published 2020-05-05. Last modified 2026-06-17.