unity edgeconnect for azure vulnerabilities and fixes

Recent CVEs affecting unity edgeconnect for azure, with upgrade or downgrade steps. 3 tracked.

Also searched as: unityedgeconnectforazure.

unity edgeconnect for azure has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2020-05-05. Highest priority: CVE-2020-12142 (score 35/100).

• CVE-2020-12144 MEDIUM 6.0 MITIGATE MITIGATE The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated
• CVE-2020-12143 MEDIUM 6.0 MITIGATE MITIGATE The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible
• CVE-2020-12142 MEDIUM 4.8 MITIGATE MITIGATE 1

FAQ

How do I fix unity edgeconnect for azure vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is unity edgeconnect for azure being exploited right now?

None of the tracked unity edgeconnect for azure CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which unity edgeconnect for azure CVE should I patch first?

CVE-2020-12142 currently ranks highest (35/100): 1.

RSS feed for unity edgeconnect for azure · ← Back to latest CVEs