CVE-2025-23173: The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the websockify…

PriorityP351high7.5CVSS 3.1

AVNACLPRNUINSUCNIHAN

EPSS

0.53%

40.6th percentile

The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the websockify service is exposed on port 6080 and accessible from the internet. This exposure introduces significant risk, as websockify has known weaknesses that can be exploited, potentially leading to remote code execution. Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers. Workarounds or Mitigation: Restrict access to TCP port 6080 if uCPE console access is not necessary. Versa recommends that Director be upgraded to one of the remediated software versions.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
versa	director	21.2.2 – 21.2.2	—
versa	director	21.2.3 – 21.2.3	—
versa	director	22.1.1 – 22.1.1	—
versa	director	22.1.2 – 22.1.2	—
versa	director	22.1.3 – 22.1.3	—
versa	director	22.1.4 – 22.1.4	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.