Skip to content
OpenAdvisories

Product · Silver Peak Systems

ECOS

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2020-12148

    OS Command Injection - nslookup API

    A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary commands with the privileges of the web server running on the EdgeConnect appliance. An attacker could e…

    Silver Peak Systems ECOS
  • Medium 6.8
    CVE-2020-12149

    OS Command Injection - Management File Upload

    The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config filename in a subsequent shell command, allowing an attacker to manipulate the resulting command by in…

    Silver Peak Systems ECOS