{"status":200,"message":null,"id":0,"total":1,"previous":null,"next":null,"data":[{"_id":"6830f94328defa375486ff2e","type":"bulletin","createdOn":"2025-05-23T22:44:42Z","message":"{{div}}{{div style='font-size: 12px;'}}{{/div}}{{div style='font-size: 18px;'}}{{div}}{{div style=\"font-size: 12px;\"}}{{br}}{{/div}}{{div style=\"font-size: 18px;\"}}{{div}}{{div style=\"font-size: 12px;\"}}{{br}}{{/div}}{{div style=\"font-size: 18px;\"}}{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}Description:{{/strong}}{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}The Versa Concerto SD-WAN orchestration platform is\n    vulnerable to an authentication bypass in the Traefik reverse proxy\n    configuration, allowing an attacker to access administrative endpoints. The\n    internal Actuator endpoint can be leveraged for access to heap dumps and trace\n    logs.{{/div}}{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{br}}{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}CVE Reported:{{/strong}}&nbsp;{{a href=\"https://nvd.nist.gov/vuln/detail/CVE-2025-34026\" style=\"color: rgb(70, 120, 134); text-decoration: underline;\"}}CVE-2025-34026{{/a}} {{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}{{br}}{{/strong}}{{/div}}{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}Product Status:{{/strong}}{{/div}}\n\n{{table class=\"MsoNormalTable\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" width=\"690\" style=\"width: 688px; margin-left: 20px;\"}}\n    {{tbody}}\n        {{tr style=\"height: 38px;\"}}\n            {{td width=\"81\" valign=\"top\" style=\"width: 80px; padding: 0in 7px; height: 38px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}&nbsp;Versions{{/strong}}{{/div}}\n            {{/td}}\n            {{td width=\"271\" valign=\"top\" style=\"width: 270px; padding: 0in 7px; height: 38px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}Affected{{/strong}}{{/div}}\n            {{/td}}\n            {{td width=\"339\" valign=\"top\" style=\"width: 338px; padding: 0in 7px; height: 38px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}Unaffected{{/strong}}{{/div}}\n            {{/td}}\n        {{/tr}}\n        {{tr style=\"height: 30px;\"}}\n            {{td width=\"81\" valign=\"top\" style=\"width: 80px; padding: 0in 7px; height: 30px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}11.4.x{{/div}}\n            {{/td}}\n            {{td width=\"271\" valign=\"top\" style=\"width: 270px; padding: 0in 7px; height: 30px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}All versions of 11.4.x{{/div}}\n            {{/td}}\n            {{td width=\"339\" valign=\"top\" style=\"width: 338px; padding: 0in 7px; height: 30px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}None{{/div}}\n            {{/td}}\n        {{/tr}}\n        {{tr style=\"height: 30px;\"}}\n            {{td width=\"81\" valign=\"top\" style=\"width: 80px; padding: 0in 7px; height: 30px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}12.1.1{{/div}}\n            {{/td}}\n            {{td width=\"271\" valign=\"top\" style=\"width: 270px; padding: 0in 7px; height: 30px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}All{{/div}}\n            {{/td}}\n            {{td width=\"339\" valign=\"top\" style=\"width: 338px; padding: 0in 7px; height: 30px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}None. Please upgrade to 12.1.2 latest version{{/div}}\n            {{/td}}\n        {{/tr}}\n        {{tr style=\"height: 30px;\"}}\n            {{td width=\"81\" valign=\"top\" style=\"width: 80px; padding: 0in 7px; height: 30px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}12.1.2{{/div}}\n            {{/td}}\n            {{td width=\"271\" valign=\"top\" style=\"width: 270px; padding: 0in 7px; height: 30px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}12.1.2 images released before January 24, 2025 hot fix.{{/div}}\n            {{/td}}\n            {{td width=\"339\" valign=\"top\" style=\"width: 338px; padding: 0in 7px; height: 30px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}12.1.2 January 24, 2025 Hot Fix and later{{/div}}\n            {{/td}}\n        {{/tr}}\n        {{tr style=\"height: 30px;\"}}\n            {{td width=\"81\" valign=\"top\" style=\"width: 80px; padding: 0in 7px; height: 30px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}12.2.1{{/div}}\n            {{/td}}\n            {{td width=\"271\" valign=\"top\" style=\"width: 270px; padding: 0in 7px; height: 30px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}None{{/div}}\n            {{/td}}\n            {{td width=\"339\" valign=\"top\" style=\"width: 338px; padding: 0in 7px; height: 30px;\"}}\n                {{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}All{{/div}}\n            {{/td}}\n        {{/tr}}\n    {{/tbody}}\n{{/table}}\n\n{{div class=\"MsoNormal\"}}Versa Managed Services Concerto nodes are not vulnerable\nas they have been upgraded to a non-vulnerable version of software or mitigation\nsteps have been applied.{{/div}}<div>{{br}}</div>\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}Severity:{{/strong}}{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}CRITICAL{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}Weakness Type:{{/strong}}{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 0.25in; font-size: 16px; font-family: Aptos, sans-serif; line-height: 24px;\"}}{{a href=\"http://cwe.mitre.org/data/definitions/287.html\" target=\"_blank\" style=\"color: rgb(70, 120, 134); text-decoration: underline;\"}}{{span style=\"font-size: 17px; font-family: &quot;Source Sans Pro&quot;, sans-serif; color: rgb(40, 96, 145); padding: 0in;\"}}CWE-287{{/span}}{{/a}}&nbsp;{{span style=\"font-size: 17px; font-family: &quot;Source Sans Pro&quot;, sans-serif; color: rgb(51, 51, 51);\"}}Improper Authentication{{/span}}{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}Exploitation Status:{{/strong}}{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}Versa Networks is not aware of any reported instance where\n    this vulnerability was exploited. Proof of concept for this vulnerability has\n    been disclosed by third party security researchers. {{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}{{br}}{{/strong}}{{/div}}{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}Workarounds or Mitigation:{{/strong}}{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}Please refer to the mitigation steps here:{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{a href=\"https://download.versa-networks.com/index.php/s/Kl3JT3mGK98DII5\" style=\"color: rgb(70, 120, 134); text-decoration: underline;\"}}https://download.versa-networks.com/index.php/s/Kl3JT3mGK98DII5{{/a}}{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}&nbsp;{{br}}{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}Software Download Links:{{/strong}}{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}https://support.versa-networks.com/support/solutions/articles/23000027619-concerto-12-1-2&nbsp;{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}&nbsp;{{br}}{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}{{strong}}Acknowledgement: {{/strong}}{{/div}}\n\n{{div class=\"MsoNormal\" style=\"margin: 0in 0in 11px; line-height: 115%; font-size: 16px; font-family: Aptos, sans-serif;\"}}We would like to thank projectdiscovery.io for discovering\n    and reporting this vulnerability.{{/div}}{{/div}}{{/div}}{{/div}}{{/div}}{{/div}}{{/div}}","subject":"CVE-2025-34026: Advising Vulnerability in Versa Concerto","To":"All","isNotified":true,"draft":false}]}