Improper access control in Versa Director
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284.
Summary
The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service. Active and Standby Directors communicate over TCP ports 4566 and 4570 to exchange High Availability (HA) information using a shared password. Affected versions of Versa Director bound to these ports on all interfaces. An attacker that can access the Versa Director could access the NCS service on port 4566 and exploit it to perform unauthorized administrative actions and perform remote code execution. Customers are recommended to follow the hardening guide. Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Versa | Director | 21.2.2 – 21.2.2; 21.2.3 – 21.2.3; 22.1.1 – 22.1.1; 22.1.2 – 22.1.2; 22.1.3 – 22.1.3; 22.1.4 – 22.1.4 | — | No fix listed | CNA |
- Director VendorVersa Affected 21.2.2 – 21.2.2; 21.2.3 – 21.2.3; 22.1.1 – 22.1.1; 22.1.2 – 22.1.2; 22.1.3 – 22.1.3; 22.1.4 – 22.1.4 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-45208
- 2026-10-03 Alias added: GHSA-h9mg-jc7j-2rr2
References
Other 7
- https://security-portal.versa-networks.com/emailbulletins/68526c3cdc94d6b9f2faf718
- https://support.versa-networks.com/support/solutions/articles/23000026724-versa-director-ha-port-exploit-discovery-remediation
- https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4
- https://support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3
- https://support.versa-networks.com/support/solutions/articles/23000025680-release-22-1-2
- https://support.versa-networks.com/support/solutions/articles/23000024323-release-21-2-3
- https://docs.versa-networks.com/Solutions/System_Hardening/Perform_Manual_Hardening_for_Versa_Director#Harden_Port_4566
More Versa vulnerabilities
- TI-2025-24195 Versa Concerto Actuator Authentication Bypass Information Leak KEVCVSS 4.0CRITICAL 9.2
- TI-2024-26638 Unrestricted file upload in Versa Director KEVCVSS 3.1HIGH 7.2
- TI-2025-24196 Versa Concerto Authentication Bypass File Write Remote Code Execution CVSS 4.0CRITICAL 10.0
- TI-2024-28419 Hard-coded credentials in Versa Director CVSS 3.1CRITICAL 10.0
- TI-2025-18035 The Versa Director software exposes a number of services by default and allow attackers… CVSS 3.1CRITICAL 9.8
- TI-2019-15169 Command injection in Versa Director CVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-45208 · CVE Program
- CVE-2024-45208 · NVD
- FIRST EPSS
- GHSA-h9mg-jc7j-2rr2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences