Command Injection Vulnerability in Versa Director SD-WAN Orchestration Platform

CVE-2025-23170

What is CVE-2025-23170?

The Versa Director SD-WAN orchestration platform is susceptible to command injection vulnerabilities due to the insecure handling of user input in the shell-connect.py script. Through this vulnerability, an attacker could potentially execute arbitrary commands on the affected system, compromising its integrity and security. While there have been no confirmed exploits reported, security researchers have disclosed proof-of-concept code that highlights the risk. Versa Networks advises users to upgrade to the latest versions to mitigate this vulnerability, as no workarounds exist to disable the affected GUI options.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References