CVE-2025-23168 impacts Versa Director SD-WAN orchestration platform, allowing attackers to bypass Two-Factor Authentication (2FA). An attacker with valid credentials can redirect One-Time Passcodes (OTPs) to their own device due to untrusted user input, OTP reuse, and insufficient rate limiting. With a CVSS score of 8.8 (HIGH), this vulnerability presents a significant risk for full compromise (C, I, A: H) with low attack complexity (AC: L) and requires only low privileges (PR: L). While Versa Networks is unaware of active exploitation, proof-of-concept code exists, though there is no public exploit intelligence or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
21.2.2CPE matchmatch criteria | cpe:2.3:a:versa-networks:versa_director:21.2.2:*:*:*:*:*:*:* | ||
21.2.3CPE matchmatch criteria | cpe:2.3:a:versa-networks:versa_director:21.2.3:*:*:*:*:*:*:* | ||
22.1.2CPE matchmatch criteria | cpe:2.3:a:versa-networks:versa_director:22.1.2:*:*:*:*:*:*:* | ||
22.1.3CPE matchmatch criteria | cpe:2.3:a:versa-networks:versa_director:22.1.3:*:*:*:*:*:*:* | ||
22.1.4CPE matchmatch criteria | cpe:2.3:a:versa-networks:versa_director:22.1.4:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.