EUVD-2024-41374

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Versa Director APIs can be exploited by injecting invalid arguments, exposing user tokens on the Internet.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-45229	20 Sep 202422:15	–	circl
CISA	Versa Networks Releases Advisory for a Vulnerability in Versa Director, CVE-2024-45229	20 Sep 202412:00	–	cisa
CNNVD	Versa Director 安全漏洞	20 Sep 202400:00	–	cnnvd
CVE	CVE-2024-45229	20 Sep 202418:09	–	cve
Cvelist	CVE-2024-45229	20 Sep 202418:09	–	cvelist
NVD	CVE-2024-45229	20 Sep 202419:15	–	nvd
Positive Technologies	PT-2024-10235 · Versa · Versa Director	24 Aug 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-45229	23 May 202508:07	–	redhatcve
Vulnrichment	CVE-2024-45229	20 Sep 202418:09	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "1378f7a7-370e-3855-9eca-1154d6bc0437",
        "vendor": {
          "name": "Versa"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "10a6b8c2-bf20-37cd-8b01-3278cd47d631",
        "product": {
          "name": "Director"
        },
        "product_version": "22.1.2 20240909 <22.1.2 20240909"
      },
      {
        "id": "185e8873-1ddc-325c-9c30-ae58dd517b0c",
        "product": {
          "name": "Director"
        },
        "product_version": "21.2.3 20240909 <21.2.3 20240909"
      },
      {
        "id": "31a5d58d-75af-3ca3-806e-93008d6e7e5e",
        "product": {
          "name": "Director"
        },
        "product_version": "22.1.4 20240909 <22.1.4 20240909"
      },
      {
        "id": "5d3b0cc3-7e1e-3c54-abd9-f8b05335e50b",
        "product": {
          "name": "Director"
        },
        "product_version": "21.2.2 20240909 <21.2.2 20240909"
      },
      {
        "id": "ba84486c-772a-3d07-aed1-1a0515352610",
        "product": {
          "name": "Director"
        },
        "product_version": "22.1.3 20240909 <22.1.3 20240909"
      },
      {
        "id": "e19fb104-bc0a-390c-b95f-610fba5515b7",
        "product": {
          "name": "Director"
        },
        "product_version": "22.1.1 20240909 <22.1.1 20240909"
      }
    ]
  }
]

Source	Link
security-portal	www.security-portal.versa-networks.com/emailbulletins/66e4a8ebda545d61ec2b1ab9

03 Oct 2025 20:07Current

6.7Medium risk

Vulners AI Score6.7

CVSS 36.6

EPSS0.00248

SSVC