CVE-2020-12149
Estado: ModificadaMedia (6.8)—
The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config filename in a subsequent shell command, allowing an attacker to manipulate the resulting command by injecting valid OS command input. This vulnerability can be exploited by an attacker with authenticated access to the Orchestrator UI or EdgeConnect UI. This affects all ECOS versions prior to: 8.1.9.15, 8.3.0.8, 8.3.1.2, 8.3.2.0, 9.0.2.0, and 9.1.0.0.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
- Puntuación base: 6.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.33%
- Percentil entre todas las CVEs puntuadas: 70
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-78
- CWE-78
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-12149",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 8.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C",
"authentication": "SINGLE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "sirt@silver-peak.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.8,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 0.9
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.8,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 0.9
}
]
},
"affected": [
{
"source": "sirt@silver-peak.com",
"affectedData": [
{
"vendor": "Silver Peak Systems, Inc.",
"product": "ECOS",
"versions": [
{
"status": "affected",
"version": "All current ECOS versions prior to 8.1.9.15"
},
{
"status": "affected",
"version": "8.3.0.8"
},
{
"status": "affected",
"version": "8.3.1.2"
},
{
"status": "affected",
"version": "8.3.2.0"
},
{
"status": "affected",
"version": "9.0.2.0"
},
{
"status": "affected",
"version": "and 9.1.0.0"
}
]
}
]
}
],
"published": "2020-12-11T16:15:11.807",
"references": [
{
"url": "https://www.silver-peak.com/support/user-documentation/security-advisories",
"tags": [
"Vendor Advisory"
],
"source": "sirt@silver-peak.com"
},
{
"url": "https://www.silver-peak.com/support/user-documentation/security-advisories",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "sirt@silver-peak.com",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config filename in a subsequent shell command, allowing an attacker to manipulate the resulting command by injecting valid OS command input. This vulnerability can be exploited by an attacker with authenticated access to the Orchestrator UI or EdgeConnect UI. This affects all ECOS versions prior to: 8.1.9.15, 8.3.0.8, 8.3.1.2, 8.3.2.0, 9.0.2.0, and 9.1.0.0."
},
{
"lang": "es",
"value": "Se detectó que la función backup/restore de la configuración en el software del dispositivo Silver Peak Unity ECOSTM (ECOS) incorpora directamente el nombre de archivo de configuración controlado por el usuario en un comando shell posterior, permitiendo a un atacante manipular el comando resultante al inyectar una entrada de comando válida del sistema operativo. Esta vulnerabilidad puede ser explotada por un atacante con acceso autenticado a la Interfaz de Usuario de Orchestrator o la Interfaz de Usuario de EdgeConnect. Esto afecta a todas las versiones de ECOS anteriores a: 8.1.9.15, 8.3.0.8, 8.3.1.2, 8.3.2.0, 9.0.2.0 y 9.1.0.0"
}
],
"lastModified": "2026-06-17T02:51:29.690",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:arubanetworks:edgeconnect_enterprise:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5865651-63E8-48B3-8247-FE5B9200F9F6",
"versionEndExcluding": "8.1.9.15",
"versionStartIncluding": "8.1"
},
{
"criteria": "cpe:2.3:a:arubanetworks:edgeconnect_enterprise:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1753A7F3-07DC-422A-BB41-83B9C32846D3",
"versionEndExcluding": "8.3.0.8",
"versionStartIncluding": "8.3.0"
},
{
"criteria": "cpe:2.3:a:arubanetworks:edgeconnect_enterprise:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3120A0E3-BFBA-4CB7-A29B-73B0220B916E",
"versionEndExcluding": "8.3.1.2",
"versionStartIncluding": "8.3.1"
},
{
"criteria": "cpe:2.3:a:arubanetworks:edgeconnect_enterprise:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "547026C9-CCBD-451E-AEC9-4DAFFB5B89C2",
"versionEndExcluding": "9.0.2.0",
"versionStartIncluding": "9.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:arubanetworks:vx-1000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2180B045-86D1-44FB-A665-60CDFA26F5DE"
},
{
"criteria": "cpe:2.3:a:arubanetworks:vx-2000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4353377E-9D3C-423F-9582-925C81E6D7DB"
},
{
"criteria": "cpe:2.3:a:arubanetworks:vx-3000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DD514ED5-0E97-4300-B960-53B048383662"
},
{
"criteria": "cpe:2.3:a:arubanetworks:vx-500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3E3466FD-0EFE-45E6-AA18-5FF55541B9A4"
},
{
"criteria": "cpe:2.3:a:arubanetworks:vx-5000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "03F95797-8F64-4200-933C-0EE89E9D9D61"
},
{
"criteria": "cpe:2.3:a:arubanetworks:vx-6000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2785D127-06A0-4E85-80AE-6B00E73CA013"
},
{
"criteria": "cpe:2.3:a:arubanetworks:vx-7000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D1736626-683E-49C4-B4A1-0EA86FFA4D6A"
},
{
"criteria": "cpe:2.3:a:arubanetworks:vx-8000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2869A025-2379-4593-8B0F-B6B5437CD696"
},
{
"criteria": "cpe:2.3:a:arubanetworks:vx-9000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0B4E6381-FAF4-4ED4-9405-5336356D9637"
},
{
"criteria": "cpe:2.3:h:arubanetworks:nx-10700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FFC924C3-9038-4CA4-8738-0705744D11B9"
},
{
"criteria": "cpe:2.3:h:arubanetworks:nx-11700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8140B4EC-955F-4FC0-8706-BBF365270854"
},
{
"criteria": "cpe:2.3:h:arubanetworks:nx-1700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C285EFEB-2FF0-45CA-AAB2-9224D4AD93BC"
},
{
"criteria": "cpe:2.3:h:arubanetworks:nx-2700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A844F08B-BCAA-4BE8-A7FE-1F6864D948FE"
},
{
"criteria": "cpe:2.3:h:arubanetworks:nx-3700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B8788AD7-B697-4B9F-BC51-CE2E78AE3044"
},
{
"criteria": "cpe:2.3:h:arubanetworks:nx-5700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E15328DE-CA41-46F9-925C-3B49121855DB"
},
{
"criteria": "cpe:2.3:h:arubanetworks:nx-6700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D21A0F79-B79B-4C42-848B-4A38267AD331"
},
{
"criteria": "cpe:2.3:h:arubanetworks:nx-700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "204B5FB4-A1F7-445C-83C5-868A7BC698BA"
},
{
"criteria": "cpe:2.3:h:arubanetworks:nx-7700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DECBFDA6-4C9A-4EC0-8642-451ECC336A94"
},
{
"criteria": "cpe:2.3:h:arubanetworks:nx-8700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A5CEF46C-AA03-4E03-8E3A-E0D2FEEA8C24"
},
{
"criteria": "cpe:2.3:h:arubanetworks:nx-9700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "10325BCF-63AA-4767-A60D-14CA0A429546"
},
{
"criteria": "cpe:2.3:h:silver-peak:unity_edgeconnect:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D4A46BCC-53C0-4FAC-B006-562DD282DD98"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "sirt@silver-peak.com"
}