CVE-2024-45208

The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service

Critical · published June 18, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
58.1
In the wild
Unconfirmed
What it is

🚨 An attacker could waltz right into your Versa Director SD-WAN orchestration platform and perform unauthorized actions! 🔥 Think of it like a treasure chest in a pirate's hideout that has a shared key—if someone gets their hands on that key, they can simply walk in and take whatever they want without a second thought! The TCP ports 4566 and 4570 are the pathways to that treasure, and they need better guarding. If an attacker gains access, they could execute remote code and take charge of the entire system—completely compromising your network's integrity! This isn’t just a minor nuisance; it’s an opportunity for an unauthorized intruder to wreak absolute havoc. You could lose sensitive data, disrupt services, or even be held for ransom!

Put simply

Think of it like a treasure chest in a pirate's hideout that has a shared key—if someone gets their hands on that key, they can simply walk in and take whatever they want without a second thought! The TCP ports 4566 and 4570 are the pathways to that treasure, and they need better guarding. This vulnerability allows an attacker with access to the Versa Director to communicate over TCP port 4566, exploiting a shared password to gain administrative privileges and execute arbitrary code. It’s a serious security gap, especially since it affects all interfaces bound to these ports.

What to do

If an attacker gains access, they could execute remote code and take charge of the entire system—completely compromising your network's integrity! This isn’t just a minor nuisance; it’s an opportunity for an unauthorized intruder to wreak absolute havoc. You could lose sensitive data, disrupt services, or even be held for ransom! Immediate action is crucial! Follow the hardening guide provided by Versa Networks to secure your installation. Ensure that access to these TCP ports is restricted to trusted sources only, and monitor your systems for any unusual activity. Patch as soon as updates are available! You've got this! By following these steps, you can reinforce your defenses and keep your network safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00860 · 58.1th percentile
Published
2025-06-18T23:30Z
EPSS history
Timeline
  • 18 JUN 23:30Z
    The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service
    cvelistv5