VulnSocial

CVE-2025-34025Patch(versa-networks / concerto)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch versa-networks concerto systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary paths that allow the container to modify host paths. The escape can be used to trigger remote code execution or direct host access depending on the host operating system configuration.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable.

versa-networks CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-732

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • concerto

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
versa-networks
Products
concerto

2 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-03-05: 1Patch / Workaround · 2026-03-05: 1Technical Details · 2026-03-05: 103-05
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • FortiGuard Labs@FortiGuardLabs
    Patch

    🚨 New Outbreak Alert: Multiple critical vulnerabilities in #Versa Concerto network security and SD-WAN platform (CVE-2025-34027, CVE-2025-34026, CVE-2025-34025). When chained, attackers can bypass authentication, escape Docker containers, and fully compromise the host system. Get full details and mitigation steps: https://ftnt.net/6011hCPnV 👈

    Post summary

    Three critical CVEs in Versa Concerto SD‑WAN can be chained to bypass authentication, escape Docker containers, and fully compromise the host. Mitigation steps and details are available at the provided link.

    01010410
    40.9K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appversa-networksconcerto12.1.1--
Appversa-networksconcerto12.1.2--

Explore more

Back to dashboardversa-networks CVEsconcerto vulnerabilities