CVE-2025-34026

Published May 21, 2025

Last updated 18 days ago

Versa Concerto

Traefik

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-34026 describes an authentication bypass vulnerability found within the Versa Concerto SD-WAN orchestration platform. This flaw stems from a misconfiguration in the Traefik reverse proxy, or an improper reliance on the X-Real-Ip header, which allows an attacker to circumvent authentication mechanisms. Successful exploitation of this vulnerability grants unauthorized access to administrative endpoints. Furthermore, attackers can leverage internal Actuator endpoints to retrieve sensitive data such as heap dumps and trace logs, which may contain credentials, session tokens, and other critical system information. The issue is known to affect Versa Concerto versions 12.1.2 through 12.2.0, and potentially other versions.

Description: The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable.
Source: disclosure@vulncheck.com
NVD status: Analyzed
Products: concerto

Risk scores

CVSS 4.0

Type: Secondary
Base score: 9.2
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: CRITICAL

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Versa Concerto Improper Authentication Vulnerability
Exploit added on: Jan 22, 2026
Exploit action due: Feb 12, 2026
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

disclosure@vulncheck.com: CWE-288

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:versa-networks:concerto:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "78511D68-DB7C-4B51-A603-3A6315D8729D",
            "versionEndExcluding": "12.1.2",
            "versionStartIncluding": "11.4.0"
          },
          {
            "criteria": "cpe:2.3:a:versa-networks:concerto:12.1.2:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BC56E615-FC18-48FF-B52E-2251B45A6B43"
          },
          {
            "criteria": "cpe:2.3:a:versa-networks:concerto:12.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BD1AC8C4-C516-49E7-AE0B-D9B5F209D928"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.