Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Versa Component: Concerto Clear all filters
TI-2025-24194 CVE-2025-34025 · GHSA-x5xg-rmf4-2q22

Versa Concerto Insecure Docker Mount Container Escape

Priority MEDIUM 40

The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary paths that allow the container to modify host…

CVSS 4.0HIGH 8.6 Local High privileges No interaction EPSS 0.0061 Published 2025-05-21 No fix listed CWE-732
TI-2025-24195 CVE-2025-34026 · GHSA-h2mm-jj4p-hm2p

Versa Concerto Actuator Authentication Bypass Information Leak

Priority CRITICAL 97KEV

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.8178 Published 2025-05-21 No fix listed CWE-288
TI-2025-24196 CVE-2025-34027 · GHSA-96gf-3rqf-c8m9

Versa Concerto Authentication Bypass File Write Remote Code Execution

Priority HIGH 79

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.46402 Published 2025-05-21 No fix listed CWE-367