CVE-2025-23171

Name of the Vulnerable Software and Affected Versions Versa Director SD-WAN orchestration platform (affected versions not specified)

Description The Versa Director SD-WAN orchestration platform has an issue with file upload permissions, allowing authenticated attackers to upload arbitrary files, including webshells, despite the UI not appearing to allow file uploads. Additionally, the platform discloses the full filename of uploaded temporary files. There are no reported instances of this issue being exploited, but a proof of concept has been disclosed by third-party security researchers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.