CVE-2025-34026

Incorrect Traefik reverse proxy configuration allows an attacker to bypass authentication mechanisms and gain direct access to internal administrative endpoints. In particular, the internal Actuator endpoint becomes accessible, which can expose sensitive operational data such as heap dumps and trace logs. Access to these resources does not require any credentials or user interaction.

A remote attacker without authentication can gain access to sensitive internal system data, including memory dumps and logs, which may lead to disclosure of configuration data, credentials, or other critical information stored in the platform's memory. It is also possible to leverage the obtained information for subsequent attacks on the infrastructure.

Apply patches available from the vendor immediately in accordance with references published on the Versa Networks security portal (security-portal.versa-networks.com). Until the fix is implemented, it is recommended to restrict network access to Concerto platform administrative endpoints using firewall or ACL rules, and monitor network traffic for unauthorized access attempts to Actuator endpoints.

Versa Concerto versions 12.1.2 through 12.2.0 inclusive. The vendor indicates that additional versions may also be vulnerable.

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.