CVE-2025-34027

Katalog CVE

CVSS 9.0 · Critical EPSS 45,2%

Kerentanan Time-of-check Time-of-use (TOCTOU) Race Condition pada versa-networks concerto. Skor CVSS 3.1 9.0 (Critical) menurut NVD.

Deskripsi (NVD)

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The Spack upload endpoint can be leveraged for a Time-of-Check to Time-of-Use (TOCTOU) write in combination with a race condition to achieve remote code execution via path loading manipulation, allowing an unauthenticated actor to achieve remote code execution (RCE).This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable.

Rincian

Terbit di NVD

21 Mei 2025

Terakhir diubah

25 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

9.0 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition

EPSS (30 hari)

45,2% peluang dieksploitasi; lebih tinggi dari 98,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://projectdiscovery.io/blog/versa-concerto-authentication-bypass-rce exploit · advisory pihak ketiga