versa News Articles

Unpatched Versa Concerto Flaws Let Attackers Escape Docker and Compromise Host

Three critical Versa Concerto flaws disclosed after 90 days allow remote code execution via reverse proxy misconfigurations.

2 weeks ago

Unpatched critical bugs in Versa Concerto lead to auth bypass, RCE

Critical vulnerabilities in Versa Concerto that are still unpatched could allow remote attackers to bypass authentication and execute arbitrary code on affected systems.

2 weeks ago

Volt Typhoon Hackers Exploit Zero-Day Vulnerability in Versa Director Servers Used by MSPs, ISPs

The Volt Typhoon hacking group has been caught exploiting a zero-day vulnerability in Versa Director servers..

Volt Typhoon exploiting Versa Director zero-day flaw | TechTarget

A Chinese nation-state threat group known as Volt Typhoon exploited a Versa Director zero-day vulnerability in attacks against U.S. organizations.

Versa Director zero-day exploited to compromise ISPs, MSPs (CVE-2024-39717) - Help Net Security

Hackers have exploited a zero-day vulnerability (CVE-2024-39717) in Versa Director to compromise US-based managed service providers.

China's Volt Typhoon Exploits 0-day in Versa's SD-WAN Director Servers

So far, the threat actor has compromised at least five organizations using CVE-2024-39717; CISA has added bug to its Known Exploited Vulnerability database.

China’s Volt Typhoon Hackers Caught Exploiting Zero-Day in Servers Used by ISPs, MSPs

Threat hunters caught Chinese APT Volt Typhoon exploiting a zero-day (CVE-2024-39717) in Versa Director servers used by ISPs and MSPs.

Versa fixes Director zero-day vulnerability exploited in attacks

Versa Networks has fixed a zero-day vulnerability exploited in the wild that allows attackers to upload malicious files by exploiting an unrestricted file upload flaw in the Versa Director GUI.

U.S. CISA adds Versa Director bug to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Versa Director bug to its Known Exploited Vulnerabilities catalog.

CISA, Federal Ajansları Eylül Ayına Kadar Versa Direktörünün Güvenlik Açığını Düzeltmeye Çağırıyor - Dünyadan Güncel Teknoloji Haberleri | Teknomers

24 Ağu 2024Ravie LakshmananGüvenlik Açığı / Devlet Güvenliği

CISA Activity - CISA Adds One Known Exploited Vulnerability to...

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-39717 Versa...

CISA pede que agências federais corrijam vulnerabilidade do Versa Director até setembro | TecMania

A Cybersecurity and Infrastructure Security Agency (CISA) dos EUA exigiu que agências federais corrijam até 13 de setembro de 2024 uma vulnerabilidade de segurança média (CVE-2024-39717, pontuação CVSS: 6,6)...

CISA Urges Federal Agencies to Patch Versa Director Vulnerability by September

CISA warns of active exploitation of Versa Director vulnerability CVE-2024-39717. Agencies urged to patch by September 2024.