PT-2025-22439 · Versa · Versa Concerto Sd-Wan

Harsh Jaiswal + 3 · Published 2025-05-21 · Updated 2026-03-05 · CVE-2025-34025

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L

Name of the Vulnerable Software and Affected Versions Versa Concerto versions 12.1.2 through 12.2.0

Description The Versa Concerto SD-WAN orchestration platform contains a flaw related to improper permission assignment for a critical resource during certificate signing request validation. This can lead to privilege escalation and container escape. The unsafe default mounting of host binary paths allows a container to modify host paths. Successful exploitation of this issue may allow an attacker to execute arbitrary code or gain direct access to the host, depending on the host operating system configuration.

Recommendations Versions 12.1.2 through 12.2.0 should be updated when a patch becomes available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

BDU:2025-06721

CVE-2025-34025

Affected Products

Versa Concerto Sd-Wan

References · 11

• 🔥 https://projectdiscovery.io/blog/versa-concerto-authentication-bypass-rce · Exploit
• https://bdu.fstec.ru/vul/2025-06721 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-34025 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-34025 · Security Note
• https://twitter.com/CveFindCom/status/1925320837508350456 · Twitter Post
• https://t.me/zerodayalert/510 · Telegram Post
• https://twitter.com/CVEnew/status/1925319703591100922 · Twitter Post
• https://twitter.com/FortiGuardLabs/status/2029587888250212553 · Twitter Post
• https://twitter.com/freedomhack101/status/1925902120668078549 · Twitter Post
• https://twitter.com/dCypherIO/status/1925552228418396422 · Twitter Post
• https://twitter.com/CCBalert/status/1927001693910077756 · Twitter Post