Versa Director SD-WAN Orchestration Platform Remote Code Execution Vulnerability via Cisco NCS Application Service

A critical remote code execution vulnerability has been identified in the Versa Director SD-WAN orchestration platform, specifically in versions 22.1.1, 22.1.2, 22.1.3, and 21.2.2. This vulnerability arises from the application's use of Cisco NCS application service, where Active and Standby Directors communicate over TCP ports 4566 and 4570 to exchange High Availability (HA) information using a shared password. Affected versions of Versa Director are bound to these ports on all interfaces. An attacker with access to the Versa Director could exploit the NCS service on port 4566 to perform unauthorized administrative actions and execute remote code.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected Versa Director instance.

Remediation

Users are advised to update to Versa Director version 22.1.4 or later. For versions 22.1.1, 22.1.2, 22.1.3, and 21.2.2, it is recommended to follow the Versa Director hardening guide to mitigate the vulnerability. After hardening, ensure to reset passwords for all users, both local and external, if external authentication was configured.