CVE-2025-23168
BaseFortify
Publication date: 2025-06-19
Last updated on: 2025-07-09
Assigner: HackerOne
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| versa-networks | versa_director | 21.2.2 |
| versa-networks | versa_director | 21.2.3 |
| versa-networks | versa_director | 22.1.2 |
| versa-networks | versa_director | 22.1.3 |
| versa-networks | versa_director | 22.1.4 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-290 | This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability affects the Versa Director SD-WAN orchestration platform's Two-Factor Authentication (2FA) system. It allows an attacker who knows a valid username and password to redirect the one-time passcodes (OTP) sent via email or SMS to their own device by exploiting untrusted user input. Additionally, OTP codes are not invalidated after use, enabling reuse by an attacker who has intercepted a valid code. The system also lacks adequate restrictions on the number or frequency of login attempts, and the OTP values are generated from a small keyspace, making brute-force attacks more feasible.
How can this vulnerability impact me? :
This vulnerability can allow an attacker to bypass the intended security of the 2FA system by intercepting or redirecting OTP codes, potentially gaining unauthorized access to user accounts. The reuse of OTP codes and the possibility of brute-force attacks increase the risk of account compromise, which can lead to unauthorized access to sensitive information and system control.
What immediate steps should I take to mitigate this vulnerability?
Versa recommends upgrading the Versa Director SD-WAN orchestration platform to one of the remediated software versions to mitigate this vulnerability.