Skip to content
OpenAdvisories
Critical VA-25-169-01 9 CVEs

Versa Networks Versa Director multiple vulnerabilities

Published Jul 2, 2025 · Updated Jul 2, 2025

Vendor: Versa Product: Director

Summary

Versa Networks Versa Director contains a variety of vulnerabilities. In the most severe cases, a remote, unauthenticated attacker could execute arbitrary code with administrative privileges.

Vulnerabilities 9

  • Critical 9.8
    CVE-2024-45208

    The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service. Active and Standby D…

    Versa Director
  • Critical 9.8
    CVE-2025-24288

    The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default…

    Versa Director
  • High 7.5
    CVE-2025-23173

    The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the …

    Versa Director
  • High 7.2
    CVE-2025-23171

    The Versa Director SD-WAN orchestration platform provides an option to upload various types of files. The Versa Directo…

    Versa Director
  • High 7.2
    CVE-2025-23172

    The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP …

    Versa Director
  • Medium 6.7
    CVE-2025-23170

    The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the…

    Versa Director
  • Medium 6.3
    CVE-2025-23168

    The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (O…

    Versa Director
  • Medium 6.1
    CVE-2025-23169

    The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, foot…

    Versa Director
  • Medium 6.1
    CVE-2025-24291

    The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files. However, the …

    Versa Director

Revision history

  1. #1.0.0

    Initial publication

References