Versa Director prior 22.1.4 20240909 Device Registration /vnms/devicereg/device/ improper authentication

Summaryinfo

A vulnerability classified as critical has been found in Versa Director. This impacts an unknown function of the file /vnms/devicereg/device/ of the component Device Registration Handler. This manipulation causes improper authentication. This vulnerability is handled as CVE-2024-45229. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability has been found in Versa Director and classified as critical. Affected by this vulnerability is some unknown processing of the file /vnms/devicereg/device/ of the component Device Registration Handler. The manipulation with an unknown input leads to a improper authentication vulnerability. The CWE definition for the vulnerability is CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen, banner display, and device registration, do not require authentication. However, it was discovered that for Directors directly connected to the Internet, one of these APIs can be exploited by injecting invalid arguments into a GET request, potentially exposing the authentication tokens of other currently logged-in users. These tokens can then be used to invoke additional APIs on port 9183. This exploit does not disclose any username or password information. Currently, there are no workarounds in Versa Director. However, if there is Web Application Firewall (WAF) or API Gateway fronting the Versa Director, it can be used to block access to the URLs of vulnerable API. /vnms/devicereg/device/* (on ports 9182 & 9183) and /versa/vnms/devicereg/device/* (on port 443). Versa recommends that Directors be upgraded to one of the remediated software versions. This vulnerability is not exploitable on Versa Directors not exposed to the Internet.We have validated that no Versa-hosted head ends have been affected by this vulnerability. Please contact Versa Technical Support or Versa account team for any further assistance.

The advisory is shared at security-portal.versa-networks.com. This vulnerability is known as CVE-2024-45229 since 08/24/2024. The exploitation appears to be difficult. The attack can be launched remotely. The exploitation needs additional levels of successful authentication. Technical details are known, but no exploit is available.

Upgrading to version 21.2.2 20240909, 21.2.3 20240909, 22.1.1 20240909, 22.1.2 20240909, 22.1.3 20240909 or 22.1.4 20240909 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Versa

Name

• Director

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion