CVE-2020-12143: Silver-Peak NX-1000 Firmware

Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days.

The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator.

Affected products

• Silver-Peak NX-1000 Firmware: affected versions not specified
• Silver-Peak NX-10k Firmware: affected versions not specified
• Silver-Peak NX-11k Firmware: affected versions not specified
• Silver-Peak NX-2000 Firmware: affected versions not specified
• Silver-Peak NX-3000 Firmware: affected versions not specified
• Silver-Peak NX-5000 Firmware: affected versions not specified
• Silver-Peak NX-6000 Firmware: affected versions not specified
• Silver-Peak NX-7000 Firmware: affected versions not specified
• Silver-Peak NX-700 Firmware: affected versions not specified
• Silver-Peak NX-8000 Firmware: affected versions not specified
• Silver-Peak NX-9000 Firmware: affected versions not specified
• Silver-Peak Unity Edgeconnect For Amazon Web Services: affected versions not specified
• Silver-Peak Unity Edgeconnect For Azure: affected versions not specified
• Silver-Peak Unity Edgeconnect For Google Cloud Platform: affected versions not specified
• Silver-Peak Unity Orchestrator: before 8.9.2 (fixed in 8.9.2)
• Silver-Peak Vx-1000 Firmware: affected versions not specified
• Silver-Peak Vx-2000 Firmware: affected versions not specified
• Silver-Peak Vx-3000 Firmware: affected versions not specified
• Silver-Peak Vx-5000 Firmware: affected versions not specified
• Silver-Peak Vx-500 Firmware: affected versions not specified
• Silver-Peak Vx-6000 Firmware: affected versions not specified
• Silver-Peak Vx-7000 Firmware: affected versions not specified
• Silver-Peak Vx-8000 Firmware: affected versions not specified
• Silver-Peak Vx-9000 Firmware: affected versions not specified

Published 2020-05-05. Last modified 2026-06-17.