CVE-2025-34026: Versa Concerto Improper Authentication Vulnerability
The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable.
Other sources
Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Versa Networks Versa Concertofrom your environment.Discontinue use of the product if mitigations are unavailable.
- Compensating control
Apply mitigations per vendor instructions and follow applicable BOD 22-01 guidance for cloud services.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34026?
CVE-2025-34026 has been assigned a critical severity level due to the potential for unauthorized access to administrative endpoints.
How do I fix CVE-2025-34026?
To fix CVE-2025-34026, update the Versa Concerto software to version 12.2.0 or later, which addresses the authentication bypass vulnerability.
What software is affected by CVE-2025-34026?
CVE-2025-34026 affects the Versa Concerto SD-WAN orchestration platform versions between 12.1.2 and 12.2.0.
What kind of attack can exploit CVE-2025-34026?
CVE-2025-34026 can be exploited by attackers to perform an authentication bypass, gaining access to sensitive administrative information.
What are the risks associated with CVE-2025-34026?
The risks associated with CVE-2025-34026 include exposure of sensitive data such as heap dumps and trace logs, which can lead to further exploitation.