Vendors / Silver Peak Systems, Inc. Silver Peak Systems, Inc. Records 17 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 5
Exploited now Silver Peak Systems, Inc. records in CISA KEV No Silver Peak Systems, Inc. vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 27
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated.
CVSS 3.1 MEDIUM 6.0· Network · High privileges · User interaction · EPSS 0.00335 · Published 2020-05-05 · No fix listed CWE-295
Priority LOW 27
The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator.
CVSS 3.1 MEDIUM 6.0· Network · High privileges · User interaction · EPSS 0.00335 · Published 2020-05-05 · No fix listed CWE-295
Priority LOW 24
1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials.
CVSS 3.1 MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00722 · Published 2020-05-05 · No fix listed CWE-668
Open these records in search → All records by CVSS severity
2 5 10 0 0
THREATIST.IORead the docs