CVE-2020-12144: Silver-Peak NX-1000 Firmware

Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days.

The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal.

Affected products

• Silver-Peak NX-1000 Firmware: affected versions not specified
• Silver-Peak NX-10k Firmware: affected versions not specified
• Silver-Peak NX-11k Firmware: affected versions not specified
• Silver-Peak NX-2000 Firmware: affected versions not specified
• Silver-Peak NX-3000 Firmware: affected versions not specified
• Silver-Peak NX-5000 Firmware: affected versions not specified
• Silver-Peak NX-6000 Firmware: affected versions not specified
• Silver-Peak NX-7000 Firmware: affected versions not specified
• Silver-Peak NX-700 Firmware: affected versions not specified
• Silver-Peak NX-8000 Firmware: affected versions not specified
• Silver-Peak NX-9000 Firmware: affected versions not specified
• Silver-Peak Unity Edgeconnect For Amazon Web Services: affected versions not specified
• Silver-Peak Unity Edgeconnect For Azure: affected versions not specified
• Silver-Peak Unity Edgeconnect For Google Cloud Platform: affected versions not specified
• Silver-Peak Unity Orchestrator: before 8.9.2 (fixed in 8.9.2)
• Silver-Peak Vx-1000 Firmware: affected versions not specified
• Silver-Peak Vx-2000 Firmware: affected versions not specified
• Silver-Peak Vx-3000 Firmware: affected versions not specified
• Silver-Peak Vx-5000 Firmware: affected versions not specified
• Silver-Peak Vx-500 Firmware: affected versions not specified
• Silver-Peak Vx-6000 Firmware: affected versions not specified
• Silver-Peak Vx-7000 Firmware: affected versions not specified
• Silver-Peak Vx-8000 Firmware: affected versions not specified
• Silver-Peak Vx-9000 Firmware: affected versions not specified

Published 2020-05-05. Last modified 2026-06-17.