CVE-2024-45229

MEDIUM

6.6

CVSS Score

Published: September 20, 2024 at 06:09 PM UTC

Updated: August 25, 2026 at 02:50 PM UTC

1 product affected across 1 vendorVersa Director

Using Director by Versa?

Get instant alerts when new vulnerabilities affect Director - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.6

Exploit prediction

EPSS 0.5%

SSVC

No known exploit

Description

The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen, banner display, and device registration, do not require authentication. However, it was discovered that for Directors directly connected to the Internet, one of these APIs can be exploited by injecting invalid arguments into a GET request, potentially exposing the authentication tokens of other currently logged-in users. These tokens can then be used to invoke additional APIs on port 9183. This exploit does not disclose any username or password information. Currently, there are no workarounds in Versa Director. However, if there is Web Application Firewall (WAF) or API Gateway fronting the Versa Director, it can be used to block access to the URLs of vulnerable API. /vnms/devicereg/device/* (on ports 9182 & 9183) and /versa/vnms/devicereg/device/* (on port 443). Versa recommends that Directors be upgraded to one of the remediated software versions. This vulnerability is not exploitable on Versa Directors not exposed to the Internet.We have validated that no Versa-hosted head ends have been affected by this vulnerability. Please contact Versa Technical Support or Versa account team for any further assistance.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Versa Director · Versa Networks

95%

v < 21.2.2 20240909v < 21.2.3 20240909v < 22.1.1 20240909v < 22.1.2 20240909v < 22.1.3 20240909v < 22.1.4 2024090921.2.2 21.2.3 22.1.1 22.1.2 22.1.3 22.1.4

Affected range stops below 21.2.2 20240909, so it looks safe — our inference, not a vendor statement

Affected range stops below 21.2.3 20240909, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.1.1 20240909, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.1.2 20240909, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.1.3 20240909, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.1.4 20240909, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://security-portal.versa-networks.com/emailbulletins/66e4a8ebda545d61ec2b1ab9

References (1)

Vendor Advisory

Source: [email protected]

https://security-portal.versa-networks.com/emailbulletins/66e4a8ebda545d61ec2b1ab9

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.6MEDIUMhackerone

Vector?

Quick Info

StatusANALYZED

CWE

CWE-306

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card