Description
The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary paths that allow the container to modify host paths. The escape can be used to trigger remote code execution or direct host access depending on the host operating system configuration.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable.
INFO
Published Date :
2025-05-21T22:11:32.081Z
Last Modified :
2026-02-26T18:27:57.798Z
Source :
VulnCheck
AFFECTED PRODUCTS
The following products are affected by CVE-2025-34025 vulnerability.
| Vendors | Products |
|---|---|
| Versa |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-34025.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability