Arbitrary file upload in Versa Director
CVE-2025-23171
The Versa Director SD-WAN orchestration platform provides an option to upload various types of files. The Versa Director does not correctly limit file upload permissions. The UI appears not to allow file uploads but uploads still succeed. In addition, the Versa Director discloses the full filename of uploaded temporary files, including the UUID prefix. Insecure UCPE image upload in Versa Director allows an authenticated attacker to upload a webshell. Exploitation Status: Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers. Workarounds or Mitigation: There are no workarounds to disable the GUI option. Versa recommends that Director be upgraded to one of the remediated software versions.
Vulnerability class: Unrestricted File Upload
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.006 (43.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 44th percentile — 43.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.006 · change: +0.001
Affected products
- Versa Director — versions 21.2.2, 21.2.3, 22.1.1
- Versa-Networks Versa Director — versions 21.2.2, 21.2.3, 22.1.1
Weakness classification (CWE)
References
- security-portal.versa-networks.com/emailbulletins/68526dbbdc94d6b9f2faf71a (Vendor Advisory)
- support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4 (Permissions Required)
- support.versa-networks.com/support/solutions/articles/23000026033-release-22-1-3 (Permissions Required)
- support.versa-networks.com/support/solutions/articles/23000025680-release-22-1-2 (Permissions Required)
- support.versa-networks.com/support/solutions/articles/23000024323-release-21-2-3 (Permissions Required)
Frequently asked questions
- What is CVE-2025-23171?
- CVE-2025-23171 is a high-severity vulnerability in Versa Director, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 7.2/10. Published 2025-06-19.
- How severe is CVE-2025-23171?
- High severity. CVSS v3 base score is 7.2 out of 10.