HIGH🇵🇱 Wersja polska

CVE-2025-34025

CVSS 8.6v4.0pub. 2025-05-21upd. 2026-08-25

The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary paths that allow the container to modify host paths. The escape can be used to trigger remote code execution or direct host access depending on the host operating system configuration.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable.

CVSS Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Versa Networks Concerto

    APP
    Versa-Networks
    12.1.112.1.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEContainer
CWE
References

Related vulnerabilities

CVE-2025-34026CRITICAL9.2⚠ KEVPL ✓same product

Versa Concerto SD-WAN: Authentication Bypass w konfiguracji Traefik reverse proxy

CVE-2025-34027CRITICAL10.0PL ✓same product

Versa Concerto SD-WAN: Authentication Bypass + RCE przez TOCTOU Race Condition

CVE-2025-24288CRITICAL9.8PL ✓same vendor

Versa Director: domyślne dane uwierzytelniające umożliwiają pełny dostęp

CVE-2024-42450CRITICAL10.0PL ✓same vendor

Versa Director: domyślne hasło PostgreSQL umożliwia nieautoryzowany dostęp

CVE-2019-25029CRITICAL9.8PL ✓same vendor

Command injection w Versa Director umożliwiający RCE