by Kastro
Paper/Archive/CVE-2025-34026

CVE-2025-34026

Versa Concerto — Versa Concerto Actuator Authentication Bypass Information Leak

KEV · due 12 FebEPSS 82%public exploitSSVC actCVSS 9.2
critical.is priorityof 100
98
CVSS 9.2 (CNA)9.2 / 10 × 3027.6In CISA KEV+3030.0EPSS percentile 99.6.996 × 2019.9Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable.

Affected

ProductAffectedFixed inSource
Concerto12.1.2 – 12.2.0–CNA

Scores by source

VulnCheck (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: partial

References

exploitprojectdiscovery.io/blog/versa-concerto-authentication-bypass-rcerefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-34026advisorysecurity-portal.versa-networks.com/emailbulletins/6830f94328defa375486ff2ekevcisa.gov/known-exploited-vulnerabilities-catalog